Vulnerability · Published Oct 25, 2026 · Assigned by VulnCheck

CVE-2026-116195Rclone before 1.75.2 Path Traversal via translateLink .rclonelink Suffix Trim

Medium 6.1

In plain English

A medium-severity path traversal in rclone from rclone. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.1Medium

Exploit odds (30 days)0.2%top 86.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Rclone before 1.75.2 contains a path traversal vulnerability in the local backend's translateLink function, which trims the .rclonelink suffix from a path after the containment check, so a name can resolve outside the destination root. Attackers can plant a directory named ...rclonelink in a source tree synced with --links and --metadata to change ownership, timestamps, and xattrs of the destination's parent directory.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Alpine:v3.24	rclone	1.75.2-r0	ALPINE-CVE-2026-116195
Ubuntu:26.10	rclone	no fix listed	UBUNTU-CVE-2026-116195

Affected products (as reported)

Vendor	Product	Versions
rclone	rclone	0 – before 1.75.2

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N

References

GitHub Security Advisory (GHSA-55qp-jrwr-x827) vendor-advisory
VulnCheck Advisory: Rclone before 1.75.2 Path Traversal via translateLink .rclonelink Suffix Trim third-party-advisory