AZL-95768
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-95768.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-95768
- Upstream
- Published
- 2026-08-13T15:19:52Z
- Modified
- 2026-08-30T05:26:50Z
- Summary
- CVE-2026-53800 affecting package rsync for versions less than 3.5.0-1
- Details
-
rsync before 3.5.0 contains a symlink race condition vulnerability in the --remove-source-files feature that allows attackers with symlink creation access to cause arbitrary file deletion. Attackers can atomically substitute a symlink for a source file between transfer completion and the unlink() call, causing rsync to delete the symlink target rather than the intended source file.
- References