Red Hat Security Advisory: rsync security, bug fix, and enhancement update
The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * rsync: rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink (CVE-2026-70460) * rsync: rsync: TLS Certificate Validation Bypass allows interception of encrypted sessions (CVE-2026-70454) * rsync: rsync: Arbitrary file deletion via malicious file list (CVE-2026-53789) * rsync: rsync < 3.5.0 Command Injection via Multiple Code Paths (CVE-2026-53790) * rsync: rsync: Memory corruption via crafted file entries (CVE-2026-70458) * rsync: rsync: Denial of Service via handshake stall (CVE-2026-70464) * rsync: rsync: Local Privilege Escalation via Symlink Following (CVE-2026-53803) * rsync: rsync: Unauthorized File Access via Symlink Module Root (CVE-2026-53784) * rsync: rsync: Authorization bypass via `auth users` directive parsing (CVE-2026-70463) * rsync: rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure (CVE-2026-70452) * rsync: rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header (CVE-2026-53791) * rsync: rsync: Arbitrary file write via --temp-dir or --link-dest options (CVE-2026-53795) * rsync: rsync: Heap Out-of-Bounds Write via crafted argument list (CVE-2026-70456) * rsync: rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode (CVE-2026-53793) * rsync: rsync: Denial of Service via Algorithmic Complexity (CVE-2026-70453) * rsync: rsync: Memory corruption via out-of-bounds write in size parsing (CVE-2026-70457) * rsync: rsync: Information disclosure and denial of service via crafted files-from entry (CVE-2026-70461) * rsync: rsync: Arbitrary File Read via Symlink Following (CVE-2026-53802) * rsync: rsync: Arbitrary file write via path traversal in --relative mode (CVE-2026-53785) * rsync: rsync: Directory escape via TOCTOU race condition in rrsync (CVE-2026-53783) Bug Fix(es) and Enhancement(s): * Rebase rsync to version 3.2.7 in RHEL9 (JIRA:RHEL-248835) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
AI Analysis
Technical Summary
The rsync utility versions prior to 3.5.0 contain multiple security vulnerabilities that allow attackers to perform path traversal via --partial-dir/--backup-dir symlinks (CVE-2026-70460), bypass TLS certificate validation to intercept encrypted sessions (CVE-2026-70454), delete arbitrary files via malicious file lists (CVE-2026-53789), execute command injection through multiple code paths (CVE-2026-53790), cause memory corruption via crafted file entries (CVE-2026-70458), cause denial of service via handshake stalls and algorithmic complexity (CVE-2026-70464, CVE-2026-70453), escalate privileges locally via symlink following (CVE-2026-53803), access unauthorized files via symlink module root (CVE-2026-53784), bypass authorization via auth users directive parsing (CVE-2026-70463), bypass access control due to DNS resolution failure (CVE-2026-70452), spoof daemon IP via PROXY protocol header (CVE-2026-53791), write arbitrary files via --temp-dir or --link-dest options (CVE-2026-53795), cause heap out-of-bounds writes (CVE-2026-70456), bypass path confinement in chroot mode (CVE-2026-53793), disclose information and cause denial of service via crafted files-from entries (CVE-2026-70461), read arbitrary files via symlink following (CVE-2026-53802), write arbitrary files via path traversal in --relative mode (CVE-2026-53785), and escape directory confinement via a TOCTOU race condition in rrsync (CVE-2026-53783). Red Hat has rebased rsync to version 3.2.7 in RHEL 9 to address these issues.
Potential Impact
These vulnerabilities collectively allow attackers to perform unauthorized file access, arbitrary file deletion and writing, command injection, local privilege escalation, denial of service, interception of encrypted sessions, and bypass of access control mechanisms. This can lead to compromise of system integrity, confidentiality, and availability on affected systems running vulnerable versions of rsync.
Mitigation Recommendations
Red Hat has released an update rebasing rsync to version 3.2.7 in Red Hat Enterprise Linux 9 that addresses all listed vulnerabilities. Users should apply this update promptly to remediate the security issues. For detailed instructions on applying the update, refer to the Red Hat advisory at https://access.redhat.com/articles/11258. No additional mitigations are specified or required beyond applying the official update.
Red Hat Security Advisory: rsync security, bug fix, and enhancement update
Description
The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * rsync: rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink (CVE-2026-70460) * rsync: rsync: TLS Certificate Validation Bypass allows interception of encrypted sessions (CVE-2026-70454) * rsync: rsync: Arbitrary file deletion via malicious file list (CVE-2026-53789) * rsync: rsync < 3.5.0 Command Injection via Multiple Code Paths (CVE-2026-53790) * rsync: rsync: Memory corruption via crafted file entries (CVE-2026-70458) * rsync: rsync: Denial of Service via handshake stall (CVE-2026-70464) * rsync: rsync: Local Privilege Escalation via Symlink Following (CVE-2026-53803) * rsync: rsync: Unauthorized File Access via Symlink Module Root (CVE-2026-53784) * rsync: rsync: Authorization bypass via `auth users` directive parsing (CVE-2026-70463) * rsync: rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure (CVE-2026-70452) * rsync: rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header (CVE-2026-53791) * rsync: rsync: Arbitrary file write via --temp-dir or --link-dest options (CVE-2026-53795) * rsync: rsync: Heap Out-of-Bounds Write via crafted argument list (CVE-2026-70456) * rsync: rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode (CVE-2026-53793) * rsync: rsync: Denial of Service via Algorithmic Complexity (CVE-2026-70453) * rsync: rsync: Memory corruption via out-of-bounds write in size parsing (CVE-2026-70457) * rsync: rsync: Information disclosure and denial of service via crafted files-from entry (CVE-2026-70461) * rsync: rsync: Arbitrary File Read via Symlink Following (CVE-2026-53802) * rsync: rsync: Arbitrary file write via path traversal in --relative mode (CVE-2026-53785) * rsync: rsync: Directory escape via TOCTOU race condition in rrsync (CVE-2026-53783) Bug Fix(es) and Enhancement(s): * Rebase rsync to version 3.2.7 in RHEL9 (JIRA:RHEL-248835) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The rsync utility versions prior to 3.5.0 contain multiple security vulnerabilities that allow attackers to perform path traversal via --partial-dir/--backup-dir symlinks (CVE-2026-70460), bypass TLS certificate validation to intercept encrypted sessions (CVE-2026-70454), delete arbitrary files via malicious file lists (CVE-2026-53789), execute command injection through multiple code paths (CVE-2026-53790), cause memory corruption via crafted file entries (CVE-2026-70458), cause denial of service via handshake stalls and algorithmic complexity (CVE-2026-70464, CVE-2026-70453), escalate privileges locally via symlink following (CVE-2026-53803), access unauthorized files via symlink module root (CVE-2026-53784), bypass authorization via auth users directive parsing (CVE-2026-70463), bypass access control due to DNS resolution failure (CVE-2026-70452), spoof daemon IP via PROXY protocol header (CVE-2026-53791), write arbitrary files via --temp-dir or --link-dest options (CVE-2026-53795), cause heap out-of-bounds writes (CVE-2026-70456), bypass path confinement in chroot mode (CVE-2026-53793), disclose information and cause denial of service via crafted files-from entries (CVE-2026-70461), read arbitrary files via symlink following (CVE-2026-53802), write arbitrary files via path traversal in --relative mode (CVE-2026-53785), and escape directory confinement via a TOCTOU race condition in rrsync (CVE-2026-53783). Red Hat has rebased rsync to version 3.2.7 in RHEL 9 to address these issues.
Potential Impact
These vulnerabilities collectively allow attackers to perform unauthorized file access, arbitrary file deletion and writing, command injection, local privilege escalation, denial of service, interception of encrypted sessions, and bypass of access control mechanisms. This can lead to compromise of system integrity, confidentiality, and availability on affected systems running vulnerable versions of rsync.
Mitigation Recommendations
Red Hat has released an update rebasing rsync to version 3.2.7 in Red Hat Enterprise Linux 9 that addresses all listed vulnerabilities. Users should apply this update promptly to remediate the security issues. For detailed instructions on applying the update, refer to the Red Hat advisory at https://access.redhat.com/articles/11258. No additional mitigations are specified or required beyond applying the official update.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:67462
- Cve Count
- 20
- Additional Cves
- ["CVE-2026-53784","CVE-2026-53785","CVE-2026-53789","CVE-2026-53790","CVE-2026-53791","CVE-2026-53793","CVE-2026-53795","CVE-2026-53802","CVE-2026-53803","CVE-2026-70452","CVE-2026-70453","CVE-2026-70454","CVE-2026-70456","CVE-2026-70457","CVE-2026-70458","CVE-2026-70460","CVE-2026-70461","CVE-2026-70463","CVE-2026-70464"]
- State
- PUBLISHED
Threat ID: 6aa8a16c55bf5e2cf5f3b86b
Added to database: 09/15/2026, 01:37:48 UTC
Last enriched: 09/15/2026, 01:43:24 UTC
Last updated: 09/15/2026, 05:01:22 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.