CVE-2026-35352CWE-367

uutils coreutils mkfifo Privilege Escalation via TOCTOU Race Condition

High · published April 22, 2026

CVSS v3.1
7.0
EPSS
0%
Percentile
1.7
In the wild
Unconfirmed
What it is

A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mkfifo utility of uutils coreutils. The utility creates a FIFO and then performs a path-based chmod to set permissions. A local attacker with write access to the parent directory can swap the newly created FIFO for a symbolic link between these two operations. This redirects the chmod call to an arbitrary file, potentially enabling privilege escalation if the utility is run with elevated privileges.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00120 · 1.7th percentile
Weakness
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition
Published
2026-04-22T16:08Z
EPSS history
Timeline
  • 22 APR 16:08Z
    uutils coreutils mkfifo Privilege Escalation via TOCTOU Race Condition
    cvelistv5