Skip to content
OpenAdvisories

Vendor

RsyncProject

40 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-70463 Public exploit

    rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing

    rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name co…