What is GHSA-7fxp-9qgr-6fxw?

GHSA-7fxp-9qgr-6fxw is a security advisory published by GitHub Security Advisories with Medium severity. rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur....

Which CVE IDs does GHSA-7fxp-9qgr-6fxw cover?

GHSA-7fxp-9qgr-6fxw covers the following CVE IDs: CVE-2026-79777. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7fxp-9qgr-6fxw?

GHSA-7fxp-9qgr-6fxw has a CVSS v3 base score of 2.7, published by GitHub Security Advisories.

GHSA-7fxp-9qgr-6fxwMediumCVSS 2.7

rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur....

Vendor

GitHub Security Advisories

Published

August 25, 2026

Last Modified

August 25, 2026

🔗 CVE IDs covered (1)

CVE-2026-79777 →

📋 Description

rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses.

🔗 References (4)

https://github.com/rclone/rclone/security/advisories/GHSA-gwfq-86j8-7qhv
https://nvd.nist.gov/vuln/detail/CVE-2026-79777
https://www.vulncheck.com/advisories/rclone-before-information-disclosure-via-rc-api
https://github.com/advisories/GHSA-7fxp-9qgr-6fxw