CVE-2026-35342: uutils coreutils mktemp Insecure Temporary File Placement via Empty TMPDIR
The mktemp utility in uutils coreutils fails to properly handle an empty TMPDIR environment variable. Unlike GNU mktemp, which falls back to /tmp when TMPDIR is an empty string, the uutils implementation treats the empty string as a valid path. This causes temporary files to be created in the current working directory (CWD) instead of the intended secure temporary directory. If the CWD is more permissive or accessible to other users than /tmp, it may lead to unintended information disclosure or unauthorized access to temporary data.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rust/uu_mktempto a version that resolves this vulnerability.Fixed in 0.6.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35342?
CVE-2026-35342 has been classified as a medium severity vulnerability due to potential risks of insecure temporary file placement.
How do I fix CVE-2026-35342?
To fix CVE-2026-35342, update to the latest version of uutils coreutils where the issue has been addressed.
What is the impact of CVE-2026-35342?
The impact of CVE-2026-35342 is that it may allow an attacker to exploit insecure temporary file placement leading to potential data exposure.
Which software is affected by CVE-2026-35342?
CVE-2026-35342 affects the uutils coreutils application, specifically its mktemp utility.
What should I do if I cannot update uutils coreutils for CVE-2026-35342?
If you cannot update uutils coreutils, consider setting a secure TMPDIR environment variable as a temporary workaround.