CVE-2026-79777

lowCVSS 2.7covered by 1 sourcefirst seen 2026-08-25

rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses.

⚡ Watch CVE-2026-79777

Get an email if CVE-2026-79777 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Advisory coverage (1)

lowCVE-2026-79777: rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occu…nvd · 2026-08-25

External references

NVD record for CVE-2026-79777

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-79777 status](https://www.csirts.com/badge/CVE-2026-79777)](https://www.csirts.com/cve/CVE-2026-79777)