CVE-2026-53802
published 2026-08-13CVE-2026-53802: rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting…
PriorityP339high7.1CVSS 3.1
AVLACLPRLUINSUCHIHAN
EPSS
0.24%
14.8th percentile
rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink following in input configuration file handling including --files-from, --password-file, and filter merge files. Attackers can place a symlink at a predictable --files-from or --password-file path, or supply a --files-from path that escapes the daemon module root, to read arbitrary files accessible to the rsync process.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| openshift | ose-rhel-coreos-8 | — | — |
| openshift | ose-rhel-coreos-9 | — | — |
| rsyncproject | rsync | <= 3.4.4 | — |
| samba | rsync | < 3.5.0 | 3.5.0 |
| samba | rsync | — | — |
CVSS provenance
nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
nvdv4.08.4HIGHCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vendor_redhat7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-53802 rsync-bpc: rsync: Arbitrary File Read via Symlink Following [fedora-all]
bugzilla·2026-09-04·CVSS 7.1
CVE-2026-53802 [HIGH] CVE-2026-53802 rsync-bpc: rsync: Arbitrary File Read via Symlink Following [fedora-all]
CVE-2026-53802 rsync-bpc: rsync: Arbitrary File Read via Symlink Following [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink following in input configuration file handling including --files-from, --password-file, and filter merge files. Attackers can place a symlink at a predictable --files-from or --password-file path, or supply a --files-from path that escapes the daemon module root, to read arbitrary files accessible to the rsync process.
Bugzilla
CVE-2026-53802 rsync-bpc: rsync: Arbitrary File Read via Symlink Following [epel-all]
bugzilla·2026-09-04·CVSS 7.1
CVE-2026-53802 [HIGH] CVE-2026-53802 rsync-bpc: rsync: Arbitrary File Read via Symlink Following [epel-all]
CVE-2026-53802 rsync-bpc: rsync: Arbitrary File Read via Symlink Following [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink following in input configuration file handling including --files-from, --password-file, and filter merge files. Attackers can place a symlink at a predictable --files-from or --password-file path, or supply a --files-from path that escapes the daemon module root, to read arbitrary files accessible to the rsync process.
Bugzilla
CVE-2026-53802 rsync: rsync: Arbitrary File Read via Symlink Following
bugzilla·2026-08-13·CVSS 7.1
CVE-2026-53802 [HIGH] CVE-2026-53802 rsync: rsync: Arbitrary File Read via Symlink Following
CVE-2026-53802 rsync: rsync: Arbitrary File Read via Symlink Following
rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink following in input configuration file handling including --files-from, --password-file, and filter merge files. Attackers can place a symlink at a predictable --files-from or --password-file path, or supply a --files-from path that escapes the daemon module root, to read arbitrary files accessible to the rsync process.
2026-08-13
Published