CVE-2026-53795 — rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest
rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the intended destination tree by specifying an absolute path via -…
Published: 2026-08-13 · CVSS: 7.2 · CVSS 4.0
rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the intended destination tree by specifying an absolute path via --temp-dir or --link-dest options. The rename-confinement logic is bypassed when these options resolve to paths outside the destination tree, enabling attacker-controlled values to write files to arbitrary locations accessible to the rsync process.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7