coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35338 via uu_chmod (>=0.0.14, <=0.0.16)

uuchmod CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35338 Source advisory: OSV:GHSA-4C7Q-4928-8445...

DEBIAN-CVE-2026-35338

A vulnerability in the chmod utility of uutils coreutils allows users to bypass the --preserve-root safety mechanism. The implementation only validates if the target path is literally / and does not canonicalize the path. An attacker or accidental user can use path variants such as /../ or symbol...

CVE-2026-35338

A vulnerability in the chmod utility of uutils coreutils allows users to bypass the --preserve-root safety mechanism. The implementation only validates if the target path is literally / and does not canonicalize the path. An attacker or accidental user can use path variants such as /../ or symbol...

CVE-2026-35338 uutils coreutils chmod Path Traversal Bypass of --preserve-root

A vulnerability in the chmod utility of uutils coreutils allows users to bypass the --preserve-root safety mechanism. The implementation only validates if the target path is literally / and does not canonicalize the path. An attacker or accidental user can use path variants such as /../ or symbol...