CVE-2026-70454 PUBLISHED

rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode

Assigner: VulnCheck
Reserved: 04.08.2026 Published: 13.08.2026 Updated: 13.08.2026

rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to validate server TLS certificates against a trusted CA or verify certificate hostname matching to decrypt or tamper with rsync session content without detection by the client.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
CVSS Score: 7.6

Product Status

Vendor RsyncProject
Product rsync
Versions Default: unaffected
  • affected from 0 to 3.4.4 (incl.)
  • Version 3.5.0 is unaffected

Credits

  • gregkh remediation developer

References

Problem Types

  • CWE-295 Improper Certificate Validation CWE