Loading vulnerability details…
CVSS v3.1
N/A
EPSS
0.52%
Published
Mar 15, 2002
Modified
Jun 16, 2026
Public PoC / Exploit
All weaponized →No public PoC or exploit code indexed for this CVE.
Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.
Weaknesses (CWE)
Affected Products (5)
References (10)