CVE-2026-53802

HIGH 7.1

rsync < 3.5.0 Arbitrary File Read via Symlink Following

CVSS Score

7.1

EPSS Score

0.0%

EPSS Percentile

0th

rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink following in input configuration file handling including --files-from, --password-file, and filter merge files. Attackers can place a symlink at a predictable --files-from or --password-file path, or supply a --files-from path that escapes the daemon module root, to read arbitrary files accessible to the rsync process.

CWE	CWE-61
Vendor	rsyncproject
Product	rsync
Published	Aug 13, 2026
Last Updated	Aug 13, 2026

Stay Ahead of the Next One

Get instant alerts for rsyncproject rsync

Be the first to know when new high vulnerabilities affecting rsyncproject rsync are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Affected Versions

RsyncProject / rsync

0 ≤ 3.4.4

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/RsyncProject/rsync/security/advisories/GHSA-4mfr-8jrv-49x4 github.com: https://github.com/RsyncProject/rsync/releases/tag/v3.5.0 vulncheck.com: https://www.vulncheck.com/advisories/rsync-arbitrary-file-read-via-symlink-following

Credits

seks99x 4drez S0S4 buger