VDB
ALAS2-2026-3264
ALAS2-2026-3264
PUBLISHED
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Amazon | rclone |
Exploit Intelligence
- gRPC-Go RBAC Authorization Policy Bypass via Missing `:path` Slash (Auth Bypass) (github-poc-repo)
- gRPC-Go RBAC Authorization Policy Bypass via Missing `:path` Slash (Auth Bypass) (github-poc)
- Kubernetes.clusterctl.locale.en-US.yaml (github-poc)
- changelog.yaml (github-poc)
- GO-2026-4762.json (github-poc)
- CHANGELOG-v1.75.3.yml (github-poc)
- CHANGELOG-v1.75.2.yml (github-poc)
- CHANGELOG-v1.75.4.yml (github-poc)
- .trivyignore.image.yaml (github-poc)
- v1.7.3.yaml (github-poc)
…and 14 more exploits
Timeline
- Apr 30, 2026 CVE Published
References
- ALAS2-2026-3264: rclone (important) advisory