Skip to content
fr Sign in
8.2 High

CVE-2026-53801 rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that…

Description

rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that allows attackers to cause the sender to enumerate and transfer files outside the module root's intended subtree. Attackers who can create or manipulate symlinks in a path component of the scanned tree can replace a symlink with a directory entry pointing outside the module root between the lstat() call and the subsequent opendir() call, exposing files beyond the intended root in both daemon-mode and non-daemon sender-side scanning.

Affected products and versions

Product Affected versions Fixed in
rsync 3.5 earliest → < 3.5.0 3.5.0
rsync 3.4 earliest → 3.4.4 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of rsync

The 44 CVEs of rsync →
CVE-2026-119741 rsync < 3.5.2 Denial of Service via hash_search() Checksum Collisions 8.7 High CVE-2026-70452 rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent… 9.1 Critical CVE-2026-70453 rsync before 3.5.0 contains an algorithmic complexity vulnerability in the hash_search() function that allows a remote… 8.7 High CVE-2026-70454 rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation… 7.6 High
Track this CVE