CVE-2026-35339

The recursive mode (-R) of the chmod utility in uutils coreutils incorrectly handles exit codes when processing multiple files. The final return value is determined solely by the success or failure of the last file processed. This allows the command to return an exit code of 0 (success) even if errors were encountered on previous files, such as 'Operation not permitted'. Scripts relying on these exit codes may proceed under a false sense of success while sensitive files remain with restrictive or incorrect permissions.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/uutils/coreutils/pull/9793	Issue Tracking Patch
https://github.com/uutils/coreutils/releases/tag/0.6.0	Release Notes

Configurations

Configuration 1 (hide)

cpe:2.3:a:uutils:coreutils:*:*:*:*:*:rust:*:*

History

26 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) El modo recursivo (-R) de la utilidad chmod en uutils coreutils maneja incorrectamente los códigos de salida al procesar múltiples archivos. El valor de retorno final se determina únicamente por el éxito o fracaso del último archivo procesado. Esto permite que el comando devuelva un código de salida de 0 (éxito) incluso si se encontraron errores en archivos anteriores, como ’Operación no permitida’. Los scripts que dependen de estos códigos de salida pueden continuar bajo una falsa sensación de éxito mientras archivos sensibles permanecen con permisos restrictivos o incorrectos.

Information

Published : 2026-04-22 17:16

Updated : 2026-10-26 21:10

NVD link : CVE-2026-35339

Mitre link : CVE-2026-35339

CVE.ORG link : CVE-2026-35339

JSON object : View

Products Affected

uutils

coreutils

CWE

CWE-253

Incorrect Check of Function Return Value

{"id": "CVE-2026-35339", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-35339", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-22T18:13:28.800322Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@ubuntu.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "security@ubuntu.com", "affectedData": [{"repo": "https://github.com/uutils/coreutils", "vendor": "Uutils", "product": "coreutils", "versions": [{"status": "affected", "version": "0", "lessThan": "0.6.0", "versionType": "semver"}], "platforms": ["Linux", "Unix", "macOS"], "packageName": "coreutils", "collectionURL": "https://github.com/uutils", "defaultStatus": "unaffected"}]}], "published": "2026-04-22T17:16:35.767", "references": [{"url": "https://github.com/uutils/coreutils/pull/9793", "tags": ["Issue Tracking", "Patch"], "source": "security@ubuntu.com"}, {"url": "https://github.com/uutils/coreutils/releases/tag/0.6.0", "tags": ["Release Notes"], "source": "security@ubuntu.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@ubuntu.com", "description": [{"lang": "en", "value": "CWE-253"}]}], "descriptions": [{"lang": "en", "value": "The recursive mode (-R) of the chmod utility in uutils coreutils incorrectly handles exit codes when processing multiple files. The final return value is determined solely by the success or failure of the last file processed. This allows the command to return an exit code of 0 (success) even if errors were encountered on previous files, such as 'Operation not permitted'. Scripts relying on these exit codes may proceed under a false sense of success while sensitive files remain with restrictive or incorrect permissions."}, {"lang": "es", "value": "El modo recursivo (-R) de la utilidad chmod en uutils coreutils maneja incorrectamente los c\u00f3digos de salida al procesar m\u00faltiples archivos. El valor de retorno final se determina \u00fanicamente por el \u00e9xito o fracaso del \u00faltimo archivo procesado. Esto permite que el comando devuelva un c\u00f3digo de salida de 0 (\u00e9xito) incluso si se encontraron errores en archivos anteriores, como \u2019Operaci\u00f3n no permitida\u2019. Los scripts que dependen de estos c\u00f3digos de salida pueden continuar bajo una falsa sensaci\u00f3n de \u00e9xito mientras archivos sensibles permanecen con permisos restrictivos o incorrectos."}], "lastModified": "2026-10-26T21:10:00.170", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:uutils:coreutils:*:*:*:*:*:rust:*:*", "vulnerable": true, "matchCriteriaId": "87C33018-2E08-45B0-B69C-7FC224F7F883", "versionEndExcluding": "0.6.0"}], "operator": "OR"}]}], "sourceIdentifier": "security@ubuntu.com"}