CyberRota Analysis
AI-GeneratedRsync versions prior to 3.5.0 are vulnerable to a symlink race condition that allows local attackers to manipulate access control lists (ACLs) or extended attributes on unintended files. By exploiting a timing window during file operations, attackers can redirect these settings to files outside the intended directory, potentially leading to elevated permissions and local privilege escalation. Organizations using affected versions of rsync should prioritize patching to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
rsync before 3.5.0 contains a symlink race condition vulnerability that allows local attackers to cause rsync to apply arbitrary ACLs or extended attributes to unintended files by substituting a symlink at a predictable destination path between the file write and the subsequent acl_set_file() or lsetxattr() call. Attackers can exploit this timing window to redirect ACL and xattr application through a crafted symlink to files outside the intended destination tree, potentially granting elevated permissions and enabling local privilege escalation.