CVE-2026-53790

CVE-2026-53790 affects rsync up to and including version 3.4.x (prior to 3.5.0). The vulnerability involves multiple command and argument injection paths, including RSYNC_CONNECT_PROG, daemon hooks, the rsync-ssl wrapper, and remote-shell newline injection. Attackers can inject shell metacharacte...