CVE-2026-53784

A flaw was found in rsync. This path traversal vulnerability allows remote clients to access files outside the intended module root. This occurs when the use chroot option is disabled and the module root path, or a component of it, is a symbolic link. The rsync daemon fails to resolve symlinks during session initialization, causing subsequent operations to reference files relative to the symlink target, leading to unauthorized file access.

This is an Important flaw. The rsync daemon is vulnerable to unauthorized file access via path traversal when configured with a symlinked module root and the use chroot option is explicitly disabled. This configuration is not default, but if present, a local attacker with low privileges could exploit this to read or write files outside the intended module root.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, ensure that the use chroot option is enabled in the rsync daemon configuration. If use chroot cannot be enabled, avoid using symlinks as the module root path or any of its components in the rsync daemon configuration. After modifying the rsync configuration, restart the rsync service for the changes to take effect.