PT-2026-71663
CVE-2026-70463
·
Published
2026-08-13
·
Updated
2026-10-05
Description by
CVSS 4.0
8.6
HighMetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
rsync versions 3.1.0 through 3.4.x
Description
An authorization bypass exists in the parsing of the auth users directive. The parser utilizes comma-only tokenization when splitting the user list, which fails to correctly process entries formatted as
@Group Name when the group name contains a space. This causes the parser to split the entry at the space boundary, resulting in the silent discard of the associated deny rule. Consequently, an authenticated user who should be denied access based on their username or group membership can connect to a restricted module.Recommendations
Update to version 3.5.0 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾