{"id":"EUVD-2026-24996","revision":"8df1e12c4ab1449595ec3458f20c4ea9","records":[{"revision":"8df1e12c4ab1449595ec3458f20c4ea9","observedAt":"2026-10-28T04:55:11.977+00:00","statement":{"source":"euvd","id":"EUVD-2026-24996","aliases":["CVE-2026-35357"],"title":"The cp utility in uutils coreutils is vulnerable to an information disclosure race condition. Destination files are initially created with umask-derived permissions (e.g., 0644) before being restricted to their final mode (e.g., 0600) later…","description":"The cp utility in uutils coreutils is vulnerable to an information disclosure race condition. Destination files are initially created with umask-derived permissions (e.g., 0644) before being restricted to their final mode (e.g., 0600) later in the process. A local attacker can race to open the file during this window; once obtained, the file descriptor remains valid and readable even after the permissions are tightened, exposing sensitive or private file contents.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","score":4.7,"severity":null}],"references":["https://github.com/uutils/coreutils/issues/10011"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24996","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Apr 22, 2026, 4:08:20 PM","dateUpdated":"Apr 22, 2026, 5:58:29 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-24996","identifiers":["EUVD-2026-24996","CVE-2026-35357"]},"retained":false,"historicalAffected":[]}],"coverage":[]}