CVE-2026-35349 | Uutils coreutils up to 0.6.x Rm Utility /tmp/rootlink link following

April 22, 2026 Yanac

A vulnerability was found in Uutils coreutils up to 0.6.x and classified as critical. Affected is an unknown function of the file /tmp/rootlink of the component Rm Utility. Such manipulation leads to link following.

This vulnerability is documented as CVE-2026-35349. The attack needs to be performed locally. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More