CVE-2026-53786 in rsync
Sumário
de MITRE • 13/08/2026
rsync before 3.5.0 contains a filter rule bypass vulnerability that allows authenticated clients to override module-level filter restrictions by supplying malicious --filter merge file directives. Attackers can inject client-side merge file directives during filter evaluation to introduce rules that supersede daemon module-level restrictions, gaining access to files the module filter was intended to exclude.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.