The CVE number for this vulnerability is CVE-2026-72756.

== Summary
Routinator exits on malformed rsync URIs

== Affected products
Routinator up to and including 0.15.2.

== Description
Routinator exits when an rsync URI for a file obtained over RRDP contains
a path that cannot be stored on disk, such as too long file names, and
folder names that overlap with existing file names.

== Solution
Install Routinator 0.15.3 or later.

== Acknowledgments
We would like to thank Qifan Zhang, Palo Alto Networks for finding
the vulnerability.