Product

Rsync (3.1.0 to 3.4.x)

1 brief RSS

CVE-2026-53791 - IP Address Spoofing in rsync Daemon

The rsync daemon before version 3.5.0 contains a vulnerability where unauthenticated attackers can inject a forged PROXY protocol header to bypass IP-based access control restrictions.

rsync +3 vulnerability cve-2026-53791 spoofing access-control-bypass file-read

4t 1c 1h ago