EIP-2026-104600

The exploit describes a symbolic link attack vulnerability in RsyncX's scheduler component due to insecure temporary file creation in /tmp/cron_rsyncxtmp. A local attacker can manipulate this to overwrite critical files like /etc/crontab by creating a symlink.