CVE-2026-93987

Received Received - Intake

Path Traversal in rclone Docker Volume Plugin

Publication date: 2026-09-19

Last updated on: 2026-09-19

Assigner: VulnCheck

Description

rclone versions 1.56.0 through 1.75.0 contain a path traversal vulnerability in the `rclone serve docker` volume plugin. newVolume() in cmd/serve/docker/volume.go computes a volume's mountpoint as filepath.Join(drv.root, name) from the attacker-supplied `name` field of a Docker VolumeDriver.Create request without verifying that the result stays within drv.root (default /var/lib/docker-volumes/rclone), and checkMountpoint() then creates that directory with file.MkdirAll before mounting. A volume name containing enough `..` components (e.g. "../../../../../../etc") therefore resolves outside the base directory, allowing anyone able to submit a VolumeDriver.Create request to the plugin socket — normally the Docker daemon, or a workload that can request named volumes in a multi-tenant orchestration setup — to make the privileged rclone plugin process create a directory and mount a remote filesystem specified in the same request at an arbitrary host path, shadowing or disrupting system directories. The advisory notes Volume.restoreState() had the same missing validation when reloading persisted volume state. Fixed in 1.75.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-19

Last Modified

2026-09-19

Generated

2026-09-20

AI Q&A

2026-09-20

EPSS Evaluated

N/A

NVD

CVE-2026-93987

Affected Vendors & Products

Vendor	Product	Version / Range
rclone	rclone	From 1.56.0 (inc) to 1.75.0 (inc)
rclone	rclone	1.75.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-73	The product allows user input to control or influence paths or file names that are used in filesystem operations.

Attack-Flow Graph

Executive Summary

This vulnerability is a path traversal issue in rclone versions 1.56.0 through 1.75.0 affecting the docker serve volume plugin. It allows attackers to escape the intended mount directory by supplying a volume name with multiple '..' components, such as '../../../../../../etc', which causes the plugin to create directories and mount remote filesystems outside the designated safe path. This can lead to unauthorized access or disruption of system directories.

Detection Guidance

Check if rclone versions 1.56.0 through 1.75.0 are installed by running: rclone version. Inspect Docker volume plugins with: docker plugin ls. Look for rclone serve docker plugin instances. Verify volume mount points are within expected directories like /var/lib/docker-volumes/rclone.

Impact Analysis

If you use rclone versions 1.56.0 to 1.75.0 with the docker serve volume plugin, an attacker with access to submit Docker VolumeDriver.Create requests could exploit this to mount malicious remote filesystems at arbitrary host paths. This may result in data corruption, unauthorized access to sensitive files, or disruption of critical system services.

Mitigation Strategies

Upgrade rclone to version 1.75.1 or later immediately. Disable the rclone serve docker plugin if not needed. Restrict Docker volume creation permissions to trusted users only. Monitor for unexpected directory creation or mounts outside designated paths.

Hi! I’m here to help you understand CVE-2026-93987. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70