rclone (serve restic): Path validation in serve restic is incomplete, so an authenticated caller escapes the configured

Impact

Path validation in serve restic is incomplete, so an authenticated caller escapes the configured backend root and reaches data outside the served subtree. On a shared backup or artifact endpoint that is one tenant reading and writing another's files.

Who can reach it

Any authenticated user of an rclone serve restic endpoint.

What to do

Upgrade rclone to the release in GHSA-45pq-889g-fcgh and restart the serve process. Check for reads and writes outside each user's expected prefix, and scope the underlying storage credential to the served subtree so an escape at the rclone layer still hits a storage-side denial.

References