Skip to content

Vulnerabilities of RsyncProject rsync

Is your version affected?

CVE Summary Score Published
CVE-2026-53789 rsync before 3.5.0 contains an improper path handling vulnerability that allows a malicious sender to expand the scope… 7.1 High Aug 13, 2026
CVE-2026-53788 rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that… 6.9 Medium Aug 13, 2026
CVE-2026-53798 rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that… 6.9 Medium Aug 13, 2026
CVE-2026-53786 rsync before 3.5.0 contains a filter rule bypass vulnerability that allows authenticated clients to override… 6.9 Medium Aug 13, 2026
CVE-2026-53785 rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the… 6.9 Medium Aug 13, 2026
CVE-2026-53784 rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the… 8.4 High Aug 13, 2026
CVE-2026-53783 rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the rrsync… 8.6 High Aug 13, 2026
CVE-2026-53803 rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files… 8.5 High Aug 13, 2026
CVE-2026-53802 rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the… 8.4 High Aug 13, 2026
CVE-2026-44510 Rsync is a file-copying tool that uses a delta-transfer algorithm to synchronize remote and local files 6.5 Medium Jul 20, 2026
CVE-2026-44508 Rsync is a file-copying tool that uses a delta-transfer algorithm to synchronize remote and local files 8.1 High Jul 20, 2026
CVE-2026-44507 Rsync is a file-copying tool that uses a delta-transfer algorithm to synchronize remote and local files 4.8 Medium Jul 20, 2026
CVE-2026-44509 Rsync is a file-copying tool that uses a delta-transfer algorithm to synchronize remote and local files 6.3 Medium Jul 20, 2026
CVE-2026-29518 Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling… 7.3 High May 20, 2026
CVE-2026-43617 Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based… 6.3 Medium May 20, 2026
CVE-2026-43618 Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit… 6.1 Medium May 20, 2026
CVE-2026-43619 Rsync version 3.4.2 and prior contain symlink race condition vulnerabilities in path-based system calls including chmod,… 7.2 High May 20, 2026
CVE-2026-43620 Rsync version 3.4.2 and prior contain a receiver-side out-of-bounds array read vulnerability in recv_files() in… 6.9 Medium May 20, 2026
CVE-2026-45232 Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack write vulnerability in the… 2.1 Low May 20, 2026