CERT24CVE-2026-53783 — Directory escape via TOCTOU race condition in rrsync for rsync < 3.5.0Loading data…

CVE-2026-53783 — Directory escape via TOCTOU race condition in rrsync for rsync < 3.5.0

Versions of rsync before 3.5.0 contain a TOCTOU race condition in the rrsync restricted shell wrapper that allows authenticated clients to escape enforced directory restrictions.

← Back to intelligence

CVE-2026-53783 — Directory escape via TOCTOU race condition in rrsync for rsync < 3.5.0

Versions of rsync before 3.5.0 contain a TOCTOU race condition in the rrsync restricted shell wrapper that allows authenticated clients to escape enforced directory restrictions.