Privilege Escalation Vulnerability in uutils Coreutils by uutils

CVE-2026-93658

What is CVE-2026-93658?

The uutils coreutils version before 0.10.0 allows privileged users to inadvertently retain setuid executables under their ownership when ownership changes fail. This flaw creates a potential security risk, as attackers can exploit these leftover setuid files to execute commands with elevated privileges, particularly on systems with capability restrictions. The issue arises during the installation process where the setuid or setgid modes are applied prematurely, making it crucial for users to upgrade to the latest versions to mitigate this vulnerability.

References