Loading story…
A high-severity vulnerability tracked as CVE-2026-71312 allows command injection in rclone versions prior to 1.75.0 when the tool interacts with SFTP servers running Windows PowerShell. The flaw stems from improper escaping in rclone's path-handling logic: it escaped only ASCII single quotes, while PowerShell also accepts several Unicode “smart quote” characters as valid string delimiters. A malicious filename on an attacker-controlled or untrusted SFTP path can therefore break out of the intended quoted string and inject arbitrary PowerShell commands.
The issue affects server-side hashing and related operations including rclone hash, rclone check, and rclone sync, potentially executing code as the victim SSH account on the remote SFTP server. Public reporting classifies the bug as CWE-78 OS command injection and lists it as remotely exploitable, with a CVSS v3.1 vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H. rclone addressed the vulnerability in 1.75.0 by adding escaping for multiple Unicode smart-quote characters, and users are advised to upgrade and avoid server-side hashing against untrusted SFTP paths.
See affected versions and whether adversaries are exploiting it.
2 events from the most recent confirmed update back to the earliest known activity.
On August 5, 2026, CVE-2026-71312 was published describing a high-severity OS command injection issue in rclone versions prior to 1.75.0. The flaw allows attacker-controlled SFTP filenames containing PowerShell smart quotes to break out of quoted paths and execute commands on remote Windows hosts when server-side hashing is invoked.
rclone addressed a command injection flaw in its SFTP backend in version 1.75.0 by escaping Unicode smart-quote characters in PowerShell path handling. The fix is referenced to GitHub commit e122fba1a57641b63a580aa26c026903a84e2e88.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
cvefeed.io
Open sourcecvereports.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Two vulnerabilities in **sshfs** were disclosed and fixed in version **3.7.6**, affecting versions up to **3.7.5**. The more severe issue, **CVE-2026-47187**, is a symlink escape flaw that lets a rogue SFTP server trick the client into reading from or writing to unintended paths on the local filesystem by returning unsafe symlink targets. The second bug, **CVE-2026-48711**, is an argument injection weakness in hostname parsing that can turn a crafted mount source into an SSH option, enabling arbitrary local command execution under specific conditions and, in some cases, without requiring SSH authentication. Public technical details and exploit code have now been released, raising the risk of active abuse against systems that use sshfs to mount remote directories over SFTP. The flaws were privately reported by Abhinav Agarwal and addressed through a coordinated release, but defenders are being urged to upgrade immediately to **sshfs 3.7.6 or later** and verify trusted remote server keys, as a malicious or spoofed server could otherwise trigger client-side compromise.
Aug 19, 2026
Two high-severity vulnerabilities in **Rclone** expose its remote control (RC) interface to unauthenticated abuse on deployments that do not enforce global HTTP authentication. **`CVE-2026-41176`** affects versions from `1.45.0` through before `1.73.5` and allows attackers to call the `options/set` endpoint to set `rc.NoAuth=true`, disabling authorization checks for many RC methods and opening access to sensitive administrative, configuration, and operational functions. A second flaw, **`CVE-2026-41179`**, affects versions from `1.48.0` through before `1.73.5` and stems from the `operations/fsinfo` endpoint not requiring authentication while accepting attacker-controlled `fs` input. Because Rclone can instantiate inline backend definitions through `rc.GetFs(...)`, an attacker can create a malicious backend on demand; in the **WebDAV** backend, the `bearer_token_command` option is executed during initialization, enabling single-request unauthenticated local command execution. Both issues were patched in **Rclone `1.73.5`** and were classified under **CWE-306**, with `CVE-2026-41179` also mapped to **CWE-78**.
Jun 29, 2026
Electerm fixed a high-severity command injection vulnerability tracked as **`CVE-2026-73224`** that could let a malicious FTP or SFTP server execute arbitrary commands on a user's system. The flaw affected versions prior to **`3.15.120`** and was triggered when a user downloaded a crafted folder and then opened **Properties** and used **Calculate Size**. According to the advisory, the application passed a server-controlled folder name into a shell command used to run `du -sh` without properly escaping single quotes, creating a **CWE-78** command injection condition. The issue was addressed in Electerm **`v3.15.120`**, whose release notes describe multiple security fixes for unsafe file-name parsing across custom editor actions, FTP/SFTP transfers, folder size checks, and RDP file transfer workflows. The vulnerability carries a **CVSS 3.1** rating of **`AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`**, indicating high impact to confidentiality, integrity, and availability, and users are advised to upgrade to the patched release.
Aug 12, 2026