{"id":"EUVD-2026-25020","revision":"b4330970f1a44cd781e2dd91afa2f30b","records":[{"revision":"b4330970f1a44cd781e2dd91afa2f30b","observedAt":"2026-10-28T04:55:29.021+00:00","statement":{"source":"euvd","id":"EUVD-2026-25020","aliases":["CVE-2026-35372"],"title":"A logic error in the ln utility of uutils coreutils allows the utility to dereference a symbolic link target even when the --no-dereference (or -n) flag is explicitly provided. The implementation previously only honored the \"no-dereference\"…","description":"A logic error in the ln utility of uutils coreutils allows the utility to dereference a symbolic link target even when the --no-dereference (or -n) flag is explicitly provided. The implementation previously only honored the \"no-dereference\" intent if the --force (overwrite) mode was also enabled. This flaw causes ln to follow a symbolic link that points to a directory and create new links inside that target directory instead of treating the symbolic link itself as the destination. In environments where a privileged user or system script uses ln -n to update a symlink, a local attacker could manipulate existing symbolic links to redirect file creation into sensitive directories, potentially leading to unauthorized file creation or system misconfiguration.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N","score":5,"severity":null}],"references":["https://github.com/uutils/coreutils/pull/11253","https://github.com/uutils/coreutils/releases/tag/0.8.0"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25020","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Apr 22, 2026, 4:08:58 PM","dateUpdated":"Apr 22, 2026, 5:21:15 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-25020","identifiers":["EUVD-2026-25020","CVE-2026-35372"]},"retained":false,"historicalAffected":[]}],"coverage":[]}