Vulnerability Description
rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the rrsync restricted shell wrapper that allows authenticated clients to escape enforced directory restrictions by substituting a symlink for a path component after validation but before transfer processing. Attackers can additionally leverage unrestricted flags such as --copy-unsafe-links, -D, and --log-file through rrsync to read or write files outside the permitted directory subtree.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/RsyncProject/rsync/releases/tag/v3.5.0
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-9cgc-64g4-3gv5
- https://www.vulncheck.com/advisories/rsync-toctou-race-condition-directory-escap
FAQ
What is CVE-2026-53783?
CVE-2026-53783 is a vulnerability with a CVSS score of 8.1 (HIGH). rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the rrsync restricted shell wrapper that allows authenticated clients to escape enforced directory r...
How severe is CVE-2026-53783?
CVE-2026-53783 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-53783?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.