rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass
rclone: RC per-server auth-proxy bypass
Rclone: Unauthenticated command execution in `rclone rcd --rc-serve` via inline remote instantiation, bypassing CVE-2026-41179 fix
Kopia: RCE via SSH ProxyCommand Injection
Ollama contains a heap out-of-bounds read vulnerability in the GGUF model loader
RClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command execution
Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution
Ollama Platform has missing authentication enabling attackers to perform model management operations