Executive brief
uutils coreutils doesn't preserve file ownership during moves across different filesystem boundaries
Affected products
- crates.io coreutils
Junglewise Threat Intelligence
CVE-2026-35351: uutils coreutils doesn't preserve file ownership during moves across different filesystem boundaries
CVE-2026-35351 · Severity: low · CVSS 3.1 · Published 2026-04-22
Technologies: coreutils (crates.io). Vendors: crates.io.
Related threats
- uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition
- uutils coreutils has an Incorrect Provision of Specified Functionality Issue
- uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition
- uutils coreutils has a UNIX Symbolic Link (Symlink) Following issue
- uutils coreutils has an Improper Input Validation Issue in its env Utility