This page tracks the Ubuntu fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-53795 →

UBUNTU-CVE-2026-53795

rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the intended destination tree by specif...

Original description

The description as published by the source.

rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the intended destination tree by specifying an absolute path via --temp-dir or --link-dest options. The rename-confinement logic is bypassed when these options resolve to paths outside the destination tree, enabling attacker-controlled values to write files to arbitrary locations accessible to the rsync process.

Source: OSV.dev (Open Source Vulnerabilities) OSV