Is CVE-2026-35341 actively exploited?

No active exploitation of CVE-2026-35341 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-35341 be exploited remotely?

No. CVE-2026-35341 requires local access to exploit.

What is the CVSS score of CVE-2026-35341?

CVE-2026-35341 has a CVSS score of 7.1 (HIGH).

HOME VULNERABILITIESCVE-2026-35341

HIGH

CVE-2026-35341

CWE-732Published: April 22, 2026· Updated: Apr 24, 2026

7.1

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:1.0th

Official Description

A vulnerability in uutils coreutils mkfifo allows for the unauthorized modification of permissions on existing files. When mkfifo fails to create a FIFO because a file already exists at the target path, it fails to terminate the operation for that path and continues to execute a follow-up set_permissions call. This results in the existing file's permissions being changed to the default mode (often 644 after umask), potentially exposing sensitive files such as SSH private keys to other users on the system.

NVD Source

Technical Analysis

CVE-2026-35341 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), with a CVSS base score of 7.1.