CVE-2026-53801

Descripción

rsync before 3.5.0 contains a symlink race condition vulnerability in the sender-s directory scanning logic that allows attackers to cause the sender to enumerate and transfer files outside the module root-s intended subtree. Attackers who can create or manipulate symlinks in a path component of the scanned tree can replace a symlink with a directory entry pointing outside the module root between the lstat() call and the subsequent opendir() call, exposing files beyond the intended root in both daemon-mode and non-daemon sender-side scanning.