CVE-2026-93658

Name of the Vulnerable Software and Affected Versions uutils coreutils versions prior to 0.10.0

Description The install function applies setuid or setgid mode bits to installation destinations before finalizing ownership changes. On capability-restricted systems, if the ownership change operation fails, a setuid executable may remain owned by the privileged invoker. This allows an attacker to execute the leftover file to gain elevated privileges.

Recommendations Update uutils coreutils to version 0.10.0.