Security Token Exposure in Rclone Due to Insecure Redirect Handling

CVE-2026-79782

What is CVE-2026-79782?

Rclone versions prior to 1.74.4 are vulnerable due to inadequate handling of HTTP redirects from HTTPS URLs. When a redirect occurs on the same host, the X-Amz-Security-Token header is not stripped, which may allow attackers to intercept plaintext HTTP traffic and capture sensitive AWS Security Token Service (STS) session tokens. This exposure presents a significant risk, as attackers can exploit this vulnerability to gain unauthorized access to AWS resources.

References