CVE-2026-53783 — Directory escape via TOCTOU race condition in rrsync for rsync < 3.5.0
Versions of rsync before 3.5.0 contain a TOCTOU race condition in the rrsync restricted shell wrapper that allows authenticated clients to escape enforced directory restrictions.
CERT24