The vulnerability in rsync before version 3.5.0 involves improper handling of symbolic links during ancillary file writes (e.g., --log-file, --write-batch, daemon-mode log and statistics paths). Rsync fails to reject symlinks at these output locations, enabling local attackers to redirect output to arbitrary filesystem locations. This can be exploited to overwrite arbitrary files, potentially leading to local privilege escalation on systems where rsync operates with elevated privileges.

Local attackers can overwrite arbitrary files on the filesystem by exploiting the symlink following flaw. This can result in local privilege escalation on installations where rsync runs with elevated privileges such as setuid or privileged daemon configurations. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid running rsync with elevated privileges or restrict local user access to systems running vulnerable versions. Monitor vendor channels for official patches or updates addressing this issue.