CVE-2026-70454

Name
CVE-2026-70454
Description
rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to validate server TLS certificates against a trusted CA or verify certificate hostname matching to decrypt or tamper with rsync session content without detection by the client.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
disclosure@vulncheck.com https://github.com/RsyncProject/rsync/releases/tag/v3.5.0
disclosure@vulncheck.com https://github.com/RsyncProject/rsync/security/advisories/GHSA-3c3x-ww2w-5r5p
disclosure@vulncheck.com https://www.vulncheck.com/advisories/rsync-tls-certificate-validation-bypass-via-ssl-openssl-mode

Match rules

CPE URI Source package Min version Max version

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
rsync edge-main 3.5.0-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
rsync 3.24-main 3.5.0-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
rsync 3.23-main 3.5.0-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
rsync 3.22-main 3.5.0-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
rsync 3.21-main 3.5.0-r0 Natanael Copa <ncopa@alpinelinux.org> fixed