{"id":"EUVD-2026-24996","enisaUuid":"126ad0d0-d9b0-3d3f-99b0-4cfc32a74e27","description":"The cp utility in uutils coreutils is vulnerable to an information disclosure race condition. Destination files are initially created with umask-derived permissions (e.g., 0644) before being restricted to their final mode (e.g., 0600) later in the process. A local attacker can race to open the file during this window; once obtained, the file descriptor remains valid and readable even after the permissions are tightened, exposing sensitive or private file contents.","datePublished":"Apr 22, 2026, 4:08:20 PM","dateUpdated":"Apr 22, 2026, 5:58:29 PM","baseScore":4.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","references":"https://github.com/uutils/coreutils/issues/10011\n","aliases":"CVE-2026-35357\n","assigner":"canonical","epss":0.09,"enisaIdProduct":[],"enisaIdVendor":[],"enisaIdVulnerability":[{"id":"99b7a63b-7335-31b5-8519-77c85f7709fc","vulnerability":{"id":"GHSA-2m8x-mvfx-gwgj","description":"uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition","datePublished":"Apr 22, 2026, 6:31:45 PM","dateUpdated":"Apr 30, 2026, 5:12:12 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-35357\nhttps://github.com/uutils/coreutils/issues/10011\nhttps://github.com/uutils/coreutils\n","enisa_id":"EUVD-2026-24996\n","aliases":"GHSA-2m8x-mvfx-gwgj\nCVE-2026-35357\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:55:10 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"cea75fd1-0442-3577-b98e-2fa320d623f0","vulnerability":{"id":"CVE-2026-35357","description":"The cp utility in uutils coreutils is vulnerable to an information disclosure race condition. Destination files are initially created with umask-derived permissions (e.g., 0644) before being restricted to their final mode (e.g., 0600) later in the process. A local attacker can race to open the file during this window; once obtained, the file descriptor remains valid and readable even after the permissions are tightened, exposing sensitive or private file contents.","datePublished":"Apr 22, 2026, 4:08:20 PM","dateUpdated":"Apr 22, 2026, 5:58:29 PM","status":"PUBLISHED","baseScore":4.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","references":"https://github.com/uutils/coreutils/issues/10011\n","enisa_id":"EUVD-2026-24996\n","assigner":"canonical","epss":0.09,"dataProcessed":"Oct 27, 2026, 7:19:10 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}