CyberRota Analysis
AI-GeneratedThe vulnerability affects rsync versions prior to 3.5.0, specifically in the --remove-source-files feature, which is susceptible to a symlink race condition. This flaw allows attackers with the ability to create symlinks to manipulate file deletions, potentially leading to arbitrary file loss. Organizations using rsync for file synchronization should prioritize updating to the latest version to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
rsync before 3.5.0 contains a symlink race condition vulnerability in the --remove-source-files feature that allows attackers with symlink creation access to cause arbitrary file deletion. Attackers can atomically substitute a symlink for a source file between transfer completion and the unlink() call, causing rsync to delete the symlink target rather than the intended source file.