Executive brief
uutils coreutils doesn't properly handle setuid and setgid bits when ownership preservation fails
Affected products
- crates.io coreutils
Junglewise Threat Intelligence
CVE-2026-35350: uutils coreutils doesn't properly handle setuid and setgid bits when ownership preservation fails
CVE-2026-35350 · Severity: low · CVSS 3.1 · Published 2026-04-22
Technologies: coreutils (crates.io). Vendors: crates.io.
Related threats
- uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition
- uutils coreutils has an Incorrect Provision of Specified Functionality Issue
- uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition
- uutils coreutils has a UNIX Symbolic Link (Symlink) Following issue
- uutils coreutils has an Improper Input Validation Issue in its env Utility