Skip to content
fr Sign in
6.9 Medium

CVE-2026-53798 rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that…

Description

rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that allows local attackers to cause transferred files to be owned by root by influencing name-converter responses to return empty values. When the name-converter subprocess returns an empty response for a uid or gid lookup, rsync incorrectly interprets it as a successful resolution to uid/gid 0 (root) rather than a lookup failure, and if the name-converter also signals fake super-user status, rsync proceeds with root ownership assignments for transferred files.

Affected products and versions

Product Affected versions Fixed in
rsync 3.5 earliest → < 3.5.0 3.5.0
rsync 3.4 earliest → 3.4.4 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of rsync

The 44 CVEs of rsync →
CVE-2026-119741 rsync < 3.5.2 Denial of Service via hash_search() Checksum Collisions 8.7 High CVE-2026-70452 rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent… 9.1 Critical CVE-2026-70453 rsync before 3.5.0 contains an algorithmic complexity vulnerability in the hash_search() function that allows a remote… 8.7 High CVE-2026-70454 rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation… 7.6 High
Track this CVE