CVE-2026-53790 — rsync before 3.5.0: command injection via multiple code paths

Multiple command and argument injection vulnerabilities affect rsync before version 3.5.0. Malicious input may allow arbitrary command execution.