Is CVE-2026-79779 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-79779?

CVE-2026-79779 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-79779

Description

rclone versions before v1.75.0 fail to reject transport downgrades in redirect handling, allowing Basic authorization and Cookie headers to be replayed over plaintext HTTP after same-host HTTPS-to-HTTP redirects. An on-path attacker observing the plaintext hop can capture and reuse credentials to perform WebDAV operations with the compromised account's permissions.