CVE-2026-35363

A vulnerability in the rm utility of uutils coreutils allows bypassing safeguards that protect the current directory. The utility correctly refuses to delete . or .., but fails to recognize equivalent paths with trailing slashes, such as ./ or .///.

Accidental or malicious use could delete the current directory, leading to data loss and system disruption.

Immediately update uutils coreutils to a version that properly handles paths with trailing slashes. Until updated, avoid using rm with arguments containing trailing slashes.