CVEFinder.io

CVE-2026-53784

⚠️ high
🔍 Scan for this CVE
Summary

rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the intended module root when use chroot is disabled and the module root path or a component of it is a symlink. The daemon calls chdir() to the module root at session initialization without resolving symlinks via realpath() or equivalent, causing subsequent relative-path operations to reference files relative to the symlink target rather than the intended module root, enabling unauthori

Description

rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the intended module root when use chroot is disabled and the module root path or a component of it is a symlink. The daemon calls chdir() to the module root at session initialization without resolving symlinks via realpath() or equivalent, causing subsequent relative-path operations to reference files relative to the symlink target rather than the intended module root, enabling unauthorized file access.

CVSS Score
7.1
High
EPSS Score
0.2
Exploit Probability
Published Date
2026-08-13
First Seen: 2026-08-14
📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 52.2% of all 360,548 vulnerabilities in our database.

#172,487
Above average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Aug 15, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Total
Complete system compromise possible
SSVC data provided by CISA
Last Modified 2026-08-31
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS Vector 4.0 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE IDs (Weakness Types)
CWE-59

📦 Affected Products 1

Vendor Product Status Affected Versions
samba rsync Affected
< 3.5.0

🔗 References 3

https://github.com/RsyncProject/rsync/releases/tag/v...
Product Release Notes
https://github.com/RsyncProject/rsync/security/advis...
Vendor Advisory
https://www.vulncheck.com/advisories/rsync-path-trav...
Release Notes Third Party Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-53786 🔶 medium 6.5 0.3 rsync before 3.5.0 contains a filter rule bypass vulnerability that allows authenticated clients to override module-le... 2026-08-13
CVE-2026-53789 🔶 medium 6.5 0.4 rsync before 3.5.0 contains an improper path handling vulnerability that allows a malicious sender to expand the scope ... 2026-08-13
CVE-2026-53791 ⛔ critical 9.1 0.5 rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to... 2026-08-13
CVE-2026-53795 ⚠️ high 8.1 0.4 rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the inte... 2026-08-13
CVE-2026-53797 🔶 medium 4.7 0.1 rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows an... 2026-08-13
CVE-2026-53798 🔶 medium 5.3 0.3 rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that a... 2026-08-13
These CVEs affect the same products