Product

Rsync (< 3.5.0)

1 brief RSS

CVE-2026-53791 - IP Address Spoofing in rsync Daemon

The rsync daemon before version 3.5.0 contains a vulnerability where unauthenticated attackers can inject a forged PROXY protocol header to bypass IP-based access control restrictions.

rsync +3 vulnerability cve-2026-53791 spoofing access-control-bypass file-read

4t 1c 1h ago