01 Record

CVE-2026-53793

rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode

CriticalPUBLISHEDCNA: VulnCheck

Base score9.1 CVSS v4.0CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

02 Description

rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode

Published: 2026-08-13 14:38Z1 DAY AGO
Last updated: 2026-08-14 16:50Z1 HR AGO
Reserved: 2026-06-10
Assigning CNA: VulnCheck
Record state: PUBLISHED
Severity: Critical (CVSS 9.1)
CVSS vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Weaknesses: CWE-59
SSVC decision: ExploitationnoneAutomatablenoTechnical Impacttotal
Data version: 5.2
Document digest: 75a2db7516d09b7b60dc5ad8d9b536fd657e3856ba182dc80d9eab5d359ee3f2

VendorProductVersionsPlatforms

RsyncProjectrsync0 to 3.4.4—