Homepage

Time-of-check Time-of-use (TOCTOU) The advisory has been revoked - it doesn't affect any version of package rsync-daemon  (opens in a new tab)

Threat Intelligence

EPSS
0.15% (5th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL10-RSYNCDAEMON-16801003
  • published23 May 2026
  • disclosed20 May 2026
Report a new vulnerability Found a mistake?

Introduced: 20 May 2026

CVE-2026-29518  (opens in a new tab)
CWE-367  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream rsync-daemon package and not the rsync-daemon package as distributed by RHEL.

Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling that allows attackers to redirect file writes outside intended directories by replacing parent directory components with symbolic links. Attackers with write access to a module path can exploit this race condition to create or overwrite arbitrary files, potentially modifying sensitive system files and achieving privilege escalation when the daemon runs with elevated privileges. This vulnerability can only be triggered if the chroot setting is false.