{"id":"EUVD-2026-24986","enisaUuid":"485d025b-6640-3b0b-8afe-300171664441","description":"A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mkfifo utility of uutils coreutils. The utility creates a FIFO and then performs a path-based chmod to set permissions. A local attacker with write access to the parent directory can swap the newly created FIFO for a symbolic link between these two operations. This redirects the chmod call to an arbitrary file, potentially enabling privilege escalation if the utility is run with elevated privileges.","datePublished":"Apr 22, 2026, 4:08:07 PM","dateUpdated":"May 4, 2026, 5:32:54 PM","baseScore":7.0,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","references":"https://github.com/uutils/coreutils/issues/10020\n","aliases":"CVE-2026-35352\n","assigner":"canonical","epss":0.15,"enisaIdProduct":[],"enisaIdVendor":[],"enisaIdVulnerability":[{"id":"d62ed4c6-22ad-3117-bd01-6f696c0241e0","vulnerability":{"id":"CVE-2026-35352","description":"A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mkfifo utility of uutils coreutils. The utility creates a FIFO and then performs a path-based chmod to set permissions. A local attacker with write access to the parent directory can swap the newly created FIFO for a symbolic link between these two operations. This redirects the chmod call to an arbitrary file, potentially enabling privilege escalation if the utility is run with elevated privileges.","datePublished":"Apr 22, 2026, 4:08:07 PM","dateUpdated":"May 4, 2026, 5:32:54 PM","status":"PUBLISHED","baseScore":7.0,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","references":"https://github.com/uutils/coreutils/issues/10020\n","enisa_id":"EUVD-2026-24986\n","assigner":"canonical","epss":0.15,"dataProcessed":"Oct 30, 2026, 7:18:58 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"e6bb747b-3f0c-11f1-8640-7ced8d12c988","vulnerability":{"id":"GHSA-9gh9-hwpr-rvqq","description":"uutils coreutils has a Time-of-Check to Time-of-Use (TOCTOU) race condition","datePublished":"Apr 22, 2026, 6:31:45 PM","dateUpdated":"May 8, 2026, 1:24:58 AM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-35352\nhttps://github.com/uutils/coreutils/issues/10020\nhttps://github.com/uutils/coreutils\nhttp://www.openwall.com/lists/oss-security/2026/05/04/4\nhttp://www.openwall.com/lists/oss-security/2026/05/04/5\nhttp://www.openwall.com/lists/oss-security/2026/05/04/6\n","enisa_id":"EUVD-2026-24986\n","aliases":"CVE-2026-35352\nGHSA-9gh9-hwpr-rvqq\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:55:10 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}