Logic Error in Uutils Cut Utility Affects Data Processing Workflow

CVE-2026-35381

What is CVE-2026-35381?

The cut utility in uutils coreutils has a logic error that leads to the mishandling of the -s flag when combined with the -z and -d '' options. This flaw misroutes the functionality through a specialized path meant for newline delimiters, failing to enforce record suppression. As a result, the cut command outputs complete records alongside NUL bytes, jeopardizing data integrity for automated workflows that depend on accurate filtering.

References