CVE-2026-35338

HIGH EPSS 7.1%
Published Apr 22, 20262mo ago · Modified Jun 17, 20261w ago
7.3 CVSS 3.1
High
Find Similar
Published Apr 22, 2026 2mo ago
Last Modified Jun 17, 2026 1w ago

Description

A vulnerability in the chmod utility of uutils coreutils allows users to bypass the --preserve-root safety mechanism. The implementation only validates if the target path is literally / and does not canonicalize the path. An attacker or accidental user can use path variants such as /../ or symbolic links to execute destructive recursive operations (e.g., chmod -R 000) on the entire root filesystem, leading to system-wide permission loss and potential complete system breakdown.

CVSS Details

Base Score
7.3
Exploitability
1.3
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction Required
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
7.1% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-22 Path Traversal Resource Mgmt

Affected Products 1

VendorProductVersionRange
uutilscoreutils* <0.6.0

References 2

  • github.com https://github.com/uutils/coreutils/pull/10033
    Issue TrackingPatch
  • github.com https://github.com/uutils/coreutils/releases/tag/0.6.0
    Release Notes

Remediation

  • github.com https://github.com/uutils/coreutils/pull/10033
    Issue TrackingPatch