CVEFinder.io

CVE-2026-53798

🔶 medium
🔍 Scan for this CVE
Summary

rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that allows local attackers to cause transferred files to be owned by root by influencing name-converter responses to return empty values. When the name-converter subprocess returns an empty response for a uid or gid lookup, rsync incorrectly interprets it as a successful resolution to uid/gid 0 (root) rather than a lookup failure, and if the name-converter also signals fake super-use

Description

rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that allows local attackers to cause transferred files to be owned by root by influencing name-converter responses to return empty values. When the name-converter subprocess returns an empty response for a uid or gid lookup, rsync incorrectly interprets it as a successful resolution to uid/gid 0 (root) rather than a lookup failure, and if the name-converter also signals fake super-user status, rsync proceeds with root ownership assignments for transferred files.

CVSS Score
5.3
Medium
EPSS Score
0.3
Exploit Probability
Published Date
2026-08-13
First Seen: 2026-08-14
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 19.0% of all 360,548 vulnerabilities in our database.

#291,967
Below average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Aug 13, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
YES
Can be exploited automatically
💥 Technical Impact
Partial
Limited system impact
🏆 Discovered By
revampstudio
SSVC data provided by CISA
Last Modified 2026-08-31
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS Vector 4.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE IDs (Weakness Types)
CWE-704

📦 Affected Products 1

Vendor Product Status Affected Versions
samba rsync Affected
< 3.5.0

🔗 References 3

https://github.com/RsyncProject/rsync/releases/tag/v...
Product Release Notes
https://github.com/RsyncProject/rsync/security/advis...
Vendor Advisory
https://www.vulncheck.com/advisories/rsync-privilege...
Release Notes Third Party Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-53784 ⚠️ high 7.1 0.2 rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the inten... 2026-08-13
CVE-2026-53786 🔶 medium 6.5 0.3 rsync before 3.5.0 contains a filter rule bypass vulnerability that allows authenticated clients to override module-le... 2026-08-13
CVE-2026-53789 🔶 medium 6.5 0.4 rsync before 3.5.0 contains an improper path handling vulnerability that allows a malicious sender to expand the scope ... 2026-08-13
CVE-2026-53791 ⛔ critical 9.1 0.5 rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to... 2026-08-13
CVE-2026-53795 ⚠️ high 8.1 0.4 rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the inte... 2026-08-13
CVE-2026-53797 🔶 medium 4.7 0.1 rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows an... 2026-08-13
These CVEs affect the same products