CVE-2026-70461

Name of the Vulnerable Software and Affected Versions rsync versions 3.2.5 through 3.4.x

Description A heap out-of-bounds write allows remote unauthenticated attackers to write one attacker-controlled byte past the end of a heap allocation. This occurs when a crafted files-from entry containing both an interior and trailing backslash is supplied to a read-only rsync daemon module, causing the add implied include() function to under-count the trailing backslash during destination buffer sizing.

Recommendations Update to version 3.5.0.