CVE-2026-53797

A symlink race condition in rsync's source tree traversal allows a low-privileged local attacker to access unauthorized files. By atomically replacing a parent directory component with a symlink during an active transfer, the attacker can redirect file reads outside the intended transfer root, resulting in information disclosure.

A Moderate severity symlink race condition in rsync allows for information disclosure. An attacker with local access—or via a prior system compromise—who can manipulate a parent directory within the rsync source tree can redirect file reads. This manipulation allows the attacker to access and expose sensitive data located outside the intended transfer root.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, ensure that the source directories and their parent directories used by rsync are not writable by untrusted users. Restricting write access to these directories prevents an attacker from creating or manipulating symlinks to redirect file reads. If rsync is run as a service, ensure it operates with the least necessary privileges.