Home

Description

A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mkfifo utility of uutils coreutils. The utility creates a FIFO and then performs a path-based chmod to set permissions. A local attacker with write access to the parent directory can swap the newly created FIFO for a symbolic link between these two operations. This redirects the chmod call to an arbitrary file, potentially enabling privilege escalation if the utility is run with elevated privileges.

PUBLISHED Reserved 2026-04-02 | Published 2026-04-22 | Updated 2026-05-04 | Assigner canonical




HIGH: 7.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-367: Time-of-Check Time-of-Use (TOCTOU) Race Condition

Product status

Default status
affected

Credits

Zellic finder

References

github.com/uutils/coreutils/issues/10020 exploit

www.openwall.com/lists/oss-security/2026/05/04/4

www.openwall.com/lists/oss-security/2026/05/04/5

www.openwall.com/lists/oss-security/2026/05/04/6

github.com/uutils/coreutils/issues/10020 issue-tracking

cve.org (CVE-2026-35352)

nvd.nist.gov (CVE-2026-35352)

Download JSON