Back to overview

CVE-2026-44509

MEDIUM
6.3
CVSS 3.1
Description
Rsync is a file-copying tool that uses a delta-transfer algorithm to synchronize remote and local files. In versions prior to 3.4.3, previous bug fixes for symlink races in open() calls missed races in other path based system calls like chmod() and chown(). For rsync daemons with "use chroot = no" this allows an attacker with local filesystem access to change permissions, ownership or timestamp on a file outside the exported module. This issue is fixed in version 3.4.3.

Metadata

CVE ID
CVE-2026-44509
State
PUBLISHED
Assigner
GitHub_M
Reserved
2026-05-06 18:28 UTC
Published
2026-07-20 20:27 UTC
Last updated
2026-07-20 20:27 UTC
Primary CWE
CWE-59
CWE-59: Improper Link Resolution Before File Access ('Link F…
Vendor / Product
RsyncProject / rsync
Sources
cve.org  ·  NVD

Severity & Metrics

6.3 MEDIUM CVSS 3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Affected products (1)
VendorProductPlatformVersions
RsyncProject rsync — < 3.4.3
Weakness (CWE)
CWESourceDescription
CWE-367 cna CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition
CWE-59 cna CWE-59: Improper Link Resolution Before File Access ('Link Following')
CWE-863 cna CWE-863: Incorrect Authorization
CVSS scores (1)
ScoreSeverityVersionSourceVector
6.3 MEDIUM 3.1 cna CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
References (1)
Back to overview