CVE-2026-35359
MediumSummary
A TOCTOU vulnerability in the cp utility of uutils coreutils allows an attacker to bypass the intended no-dereference behavior. The utility checks if a source path is a symbolic link using path-based metadata but subsequently opens it without the O_NOFOLLOW flag.
Risk Assessment
An attacker with system access can exploit this flaw for unauthorized file access or privilege escalation by swapping the symbolic link between the check and the use.
Recommendation
Immediately update the uutils coreutils package to a patched version that fixes the TOCTOU vulnerability and implement file integrity monitoring mechanisms.
Original NVD description (English source)
A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utility of uutils coreutils allows an attacker to bypass no-dereference intent. The utility checks if a source path is a symbolic link using path-based metadata but subsequently opens it without the O_NOFOLLOW flag. An attacker with con