Vulnerability Description
A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mkfifo utility of uutils coreutils. The utility creates a FIFO and then performs a path-based chmod to set permissions. A local attacker with write access to the parent directory can swap the newly created FIFO for a symbolic link between these two operations. This redirects the chmod call to an arbitrary file, potentially enabling privilege escalation if the utility is run with elevated privileges.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Uutils | Coreutils | - |
Related Weaknesses (CWE)
References
- https://github.com/uutils/coreutils/issues/10020ExploitIssue TrackingVendor Advisory
- http://www.openwall.com/lists/oss-security/2026/05/04/4
- http://www.openwall.com/lists/oss-security/2026/05/04/5
- http://www.openwall.com/lists/oss-security/2026/05/04/6
- https://github.com/uutils/coreutils/issues/10020ExploitIssue TrackingVendor Advisory
FAQ
What is CVE-2026-35352?
CVE-2026-35352 is a vulnerability with a CVSS score of 7.0 (HIGH). A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mkfifo utility of uutils coreutils. The utility creates a FIFO and then performs a path-based chmod to set permissions. A local att...
How severe is CVE-2026-35352?
CVE-2026-35352 has been rated HIGH with a CVSS base score of 7.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-35352?
Check the references section above for vendor advisories and patch information. Affected products include: Uutils Coreutils.