CVE-2026-53793 — rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode

rsync before version 3.5.0 contains a path confinement bypass vulnerability. When the module root contains a /./ boundary marker, remote clients can construct paths that resolve outside the chroot boundary, enabling unauthorized read or write access outside the module subtree.