Skip to content
fr Sign in
8.4 High

CVE-2026-53784 rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the…

Description

rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the intended module root when use chroot is disabled and the module root path or a component of it is a symlink. The daemon calls chdir() to the module root at session initialization without resolving symlinks via realpath() or equivalent, causing subsequent relative-path operations to reference files relative to the symlink target rather than the intended module root, enabling unauthorized file access.

Affected products and versions

Product Affected versions Fixed in
rsync 3.5 earliest → < 3.5.0 3.5.0
rsync 3.4 earliest → 3.4.4 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of rsync

The 44 CVEs of rsync →
CVE-2026-119741 rsync < 3.5.2 Denial of Service via hash_search() Checksum Collisions 8.7 High CVE-2026-70452 rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent… 9.1 Critical CVE-2026-70453 rsync before 3.5.0 contains an algorithmic complexity vulnerability in the hash_search() function that allows a remote… 8.7 High CVE-2026-70454 rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation… 7.6 High
Track this CVE