CVE-2026-53799: CWE-59 Improper Link Resolution Before File Access ('Link Following') in RsyncProject rsync
rsync before 3.5.0 contains a symlink race condition vulnerability that allows local attackers to cause rsync to apply arbitrary ACLs or extended attributes to unintended files by substituting a symlink at a predictable destination path between the file write and the subsequent acl_set_file() or lsetxattr() call. Attackers can exploit this timing window to redirect ACL and xattr application through a crafted symlink to files outside the intended destination tree, potentially granting elevated permissions and enabling local privilege escalation.
AI Analysis
Technical Summary
CVE-2026-53799 describes a symlink race condition vulnerability in rsync before version 3.5.0. The vulnerability arises because rsync applies ACLs or extended attributes to files after writing them, but an attacker can replace the target file with a symlink during this window. This causes the ACL or extended attributes to be applied to an unintended file outside the intended destination tree. Exploiting this timing window can grant elevated permissions and enable local privilege escalation.
Potential Impact
Local attackers can exploit this vulnerability to redirect ACL and extended attribute application to arbitrary files, potentially granting elevated permissions. This can lead to local privilege escalation on affected systems.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch link is provided, users should monitor RsyncProject advisories for updates and avoid running rsync with elevated privileges on untrusted input until a fix is available.
CVE-2026-53799: CWE-59 Improper Link Resolution Before File Access ('Link Following') in RsyncProject rsync
Description
rsync before 3.5.0 contains a symlink race condition vulnerability that allows local attackers to cause rsync to apply arbitrary ACLs or extended attributes to unintended files by substituting a symlink at a predictable destination path between the file write and the subsequent acl_set_file() or lsetxattr() call. Attackers can exploit this timing window to redirect ACL and xattr application through a crafted symlink to files outside the intended destination tree, potentially granting elevated permissions and enabling local privilege escalation.
CVSS v4.0
Score 7.2high
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-53799 describes a symlink race condition vulnerability in rsync before version 3.5.0. The vulnerability arises because rsync applies ACLs or extended attributes to files after writing them, but an attacker can replace the target file with a symlink during this window. This causes the ACL or extended attributes to be applied to an unintended file outside the intended destination tree. Exploiting this timing window can grant elevated permissions and enable local privilege escalation.
Potential Impact
Local attackers can exploit this vulnerability to redirect ACL and extended attribute application to arbitrary files, potentially granting elevated permissions. This can lead to local privilege escalation on affected systems.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch link is provided, users should monitor RsyncProject advisories for updates and avoid running rsync with elevated privileges on untrusted input until a fix is available.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-06-10T20:14:32.828Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a7ddec6bf8831d5395cfcfc
Added to database: 08/13/2026, 15:12:06 UTC
Last enriched: 08/13/2026, 15:43:52 UTC
Last updated: 08/13/2026, 17:43:31 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.