{"id":"GHSA-wq63-vh5h-pr5p","revision":"89c2c2a51605484fb9676ae1f664b910","records":[{"revision":"89c2c2a51605484fb9676ae1f664b910","observedAt":"2026-10-24T13:19:54.901+00:00","statement":{"source":"osv","id":"GHSA-wq63-vh5h-pr5p","aliases":["CVE-2026-35372"],"title":"uutils coreutils has a UNIX Symbolic Link (Symlink) Following issue","description":"A logic error in the ln utility of uutils coreutils allows the utility to dereference a symbolic link target even when the --no-dereference (or -n) flag is explicitly provided. The implementation previously only honored the \"no-dereference\" intent if the --force (overwrite) mode was also enabled. This flaw causes ln to follow a symbolic link that points to a directory and create new links inside that target directory instead of treating the symbolic link itself as the destination. In environments where a privileged user or system script uses ln -n to update a symlink, a local attacker could manipulate existing symbolic links to redirect file creation into sensitive directories, potentially leading to unauthorized file creation or system misconfiguration.","state":0,"publishedAt":"2026-04-22T18:31:46+00:00","modifiedAt":"2026-05-05T16:26:29.509542+00:00","affected":[{"ecosystem":"crates.io","name":"coreutils","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.8.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"MODERATE"}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2026-35372","https://github.com/uutils/coreutils/pull/11253","https://github.com/uutils/coreutils/commit/394c4b17f2f382b4be9f54389bcb79028de02f39","https://github.com/uutils/coreutils","https://github.com/uutils/coreutils/releases/tag/0.8.0"],"sourceUrl":"https://github.com/advisories/GHSA-wq63-vh5h-pr5p","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-wq63-vh5h-pr5p","identifiers":["GHSA-wq63-vh5h-pr5p","CVE-2026-35372"]},"retained":false,"historicalAffected":[]}],"coverage":[]}