CVE-2026-93658Patch

LOWCVSS 7.3 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

uutils coreutils versions before 0.10.0 apply setuid or setgid mode to install destinations before finalizing ownership changes, allowing privileged users to leave setuid executables owned by the privileged invoker when ownership changes fail. Attackers can execute leftover setuid files with elevated privileges when ownership change operations fail on capability-restricted systems.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-281

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 2 signals
Peaked 1d ago at 1 mentions (2026-09-18); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Patch

2100.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-93658

Full discourse2 posts

Upwind Security MDR@UpwindMDR45d
Patch
🚨High - uutils coreutils install setuid/setgid ordering Privilege Escalation (CVE-2026-93658) uutils coreutils 'install' applies setuid/setgid mode bits on the destination before final chown/chgrp completes. If the ownership change fails, a leftover setuid executable can remain owned by the privileged invoker, letting an attacker execute it to gain elevated privileges on capability-restricted systems. 👉Affected: uutils coreutils < 0.10.0 | Upgrade to 0.10.0
Post summary
Describes a setuid privilege escalation bug in uutils coreutils versions before 0.10.0 and advises upgrading to version 0.10.0 to mitigate it.
0001078
307 followersView on X
CVE@CVEnew46d
Patch
CVE-2026-93658 uutils coreutils versions before 0.10.0 apply setuid or setgid mode to install destinations before finalizing ownership changes, allowing privileged users to leave se… https://www.cve.org/CVERecord?id=CVE-2026-93658
Post summary
The text announces CVE-2026-93658 in uutils coreutils (pre-0.10.0), describing a setuid/setgid ownership-change flaw, with 0.10.0 as the remediated version. No PoC, exploit tool, or active exploitation is referenced.
00010801
58.1K followersView on X

Explore more

Back to dashboard