{"id":"EUVD-2026-24981","enisaUuid":"97f71993-098e-3d26-8d48-93e5e46827ac","description":"A vulnerability in the rm utility of uutils coreutils allows a bypass of the --preserve-root protection. The implementation uses a path-string check rather than comparing device and inode numbers to identify the root directory. An attacker or accidental user can bypass this safeguard by using a symbolic link that resolves to the root directory (e.g., /tmp/rootlink -\u003e /), potentially leading to the unintended recursive deletion of the entire root filesystem.","datePublished":"Apr 22, 2026, 4:07:59 PM","dateUpdated":"Apr 22, 2026, 6:05:13 PM","baseScore":6.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","references":"https://github.com/uutils/coreutils/pull/9706\nhttps://github.com/uutils/coreutils/releases/tag/0.7.0\n","aliases":"CVE-2026-35349\nGHSA-7cr3-h577-g38j\n","assigner":"canonical","epss":0.19,"enisaIdProduct":[{"id":"76c005db-ce99-3172-a1ed-78f97c520e9a","product":{"name":"coreutils","vendor":{"name":"Uutils"}},"product_version":"0 \u003c0.7.0"}],"enisaIdVendor":[{"id":"a8d729dc-ad33-31fd-abfa-2c8b6bc83c76","vendor":{"name":"Uutils"}}],"enisaIdVulnerability":[{"id":"099f495e-2d3d-34bb-8138-e06b433ba700","vulnerability":{"id":"CVE-2026-35349","description":"A vulnerability in the rm utility of uutils coreutils allows a bypass of the --preserve-root protection. The implementation uses a path-string check rather than comparing device and inode numbers to identify the root directory. An attacker or accidental user can bypass this safeguard by using a symbolic link that resolves to the root directory (e.g., /tmp/rootlink -\u003e /), potentially leading to the unintended recursive deletion of the entire root filesystem.","datePublished":"Apr 22, 2026, 4:07:59 PM","dateUpdated":"Apr 22, 2026, 6:05:13 PM","status":"PUBLISHED","baseScore":6.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","references":"https://github.com/uutils/coreutils/pull/9706\nhttps://github.com/uutils/coreutils/releases/tag/0.7.0\n","enisa_id":"EUVD-2026-24981\n","assigner":"canonical","epss":0.19,"dataProcessed":"Nov 1, 2026, 7:19:35 AM","vulnerabilityProduct":[{"id":"c5153aab-625a-348d-b3a7-410975260c6a","product":{"name":"coreutils","vendor":{"name":"Uutils"}},"product_version":"0 \u003c0.7.0"}],"vulnerabilityVendor":[{"id":"ef047d8d-4528-30a8-9fad-5caa31a9f87f","vendor":{"name":"Uutils"}}]}},{"id":"a1bd9e84-b1dc-3967-a342-ced0fbb4da3a","vulnerability":{"id":"GHSA-v762-x3cf-5mfg","description":"Duplicate Advisory: uutils coreutils has a Link Following Issue Via rm Utility","datePublished":"Apr 22, 2026, 6:31:45 PM","dateUpdated":"Jul 6, 2026, 8:15:20 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-35349\nhttps://github.com/uutils/coreutils/pull/9706\nhttps://github.com/uutils/coreutils/commit/5e5968cdbc6618acd6c2402a8a98b503f278835e\nhttps://github.com/uutils/coreutils\nhttps://github.com/uutils/coreutils/releases/tag/0.7.0\n","enisa_id":"EUVD-2026-24981\n","aliases":"GHSA-v762-x3cf-5mfg\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:59:37 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"d016a2f1-f0ce-33a0-a926-f0fdcee5055b","vulnerability":{"id":"GHSA-7cr3-h577-g38j","description":"rm: --preserve-root bypassed via a symlink to / (string check instead of dev/inode)","datePublished":"Jul 6, 2026, 8:15:27 PM","dateUpdated":"Jul 6, 2026, 8:15:27 PM","baseScore":0.0,"references":"https://github.com/uutils/coreutils/security/advisories/GHSA-7cr3-h577-g38j\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-35349\nhttps://github.com/uutils/coreutils/pull/9706\nhttps://github.com/uutils/coreutils/commit/5e5968cdbc6618acd6c2402a8a98b503f278835e\nhttps://github.com/uutils/coreutils\nhttps://github.com/uutils/coreutils/releases/tag/0.7.0\n","enisa_id":"EUVD-2026-24981\n","aliases":"CVE-2026-35349\nGHSA-7cr3-h577-g38j\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:02:28 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}