VulnSocial

CVE-2026-35341Disclousure(uutils / coreutils)

LOWCVSS 7.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability in uutils coreutils mkfifo allows for the unauthorized modification of permissions on existing files. When mkfifo fails to create a FIFO because a file already exists at the target path, it fails to terminate the operation for that path and continues to execute a follow-up set_permissions call. This results in the existing file's permissions being changed to the default mode (often 644 after umask), potentially exposing sensitive files such as SSH private keys to other users on the system.

uutils CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Weakness type (CWE)
CWE-732

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • coreutils

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclousure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
uutils
Products
coreutils

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-04-22: 1Technical Details · 2026-04-22: 104-22
Signal classification1 categories
Disclousure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • CVE@CVEnew
    Disclousure

    CVE-2026-35341 A vulnerability in uutils coreutils mkfifo allows for the unauthorized modification of permissions on existing files. When mkfifo fails to create a FIFO because a fil… https://www.cve.org/CVERecord?id=CVE-2026-35341

    Post summary

    The text is a concise CVE record summary describing a permission‑modification vulnerability in uutils coreutils mkfifo, with no evidence of PoC, exploit, active attacks, patch, or false‑positive claims.

    00000171
    57.2K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appuutilscoreutils-rust-

Explore more

Back to dashboarduutils CVEscoreutils vulnerabilities