Vulnerability Description
rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink following in input configuration file handling including --files-from, --password-file, and filter merge files. Attackers can place a symlink at a predictable --files-from or --password-file path, or supply a --files-from path that escapes the daemon module root, to read arbitrary files accessible to the rsync process.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Samba | Rsync | < 3.5.0 |
Related Weaknesses (CWE)
References
- https://github.com/RsyncProject/rsync/releases/tag/v3.5.0ProductRelease Notes
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-4mfr-8jrv-49x4Vendor Advisory
- https://www.vulncheck.com/advisories/rsync-arbitrary-file-read-via-symlink-folloRelease NotesThird Party Advisory
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-4mfr-8jrv-49x4Vendor Advisory
FAQ
What is CVE-2026-53802?
CVE-2026-53802 is a vulnerability with a CVSS score of 7.1 (HIGH). rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink following in input configuration file ...
How severe is CVE-2026-53802?
CVE-2026-53802 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-53802?
Check the references section above for vendor advisories and patch information. Affected products include: Samba Rsync.