01 Record

CVE-2026-70463

rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing

HighPUBLISHEDCNA: VulnCheck

Base score8.6 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

02 Description

rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing

Published: 2026-08-13 14:42Z1 DAY AGO
Last updated: 2026-08-14 18:09Z32 MIN AGO
Reserved: 2026-08-04
Assigning CNA: VulnCheck
Record state: PUBLISHED
Severity: High (CVSS 8.6)
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Weaknesses: CWE-863
SSVC decision: ExploitationnoneAutomatablenoTechnical Impactpartial
Data version: 5.2
Document digest: e18ee791beb128a89e11a82f038c8d20ef88a6b9c67ebd2c658ae2c4b0386008

VendorProductVersionsPlatforms

RsyncProjectrsync3.1.0 to 3.4.4—