Cyber Resilience

CVE-2026-35371

Uutils Coreutils

Public PoC
Published
22 April 2026
Modified
04 May 2026
CVSS Score v3.1 3.3
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS Score 0.0012 2th percentile
Risk Priority 15 floored blend · peak EPSS

Summary

CVE-2026-35371 is a low-severity User Interface (UI) Misrepresentation of Critical Information (CWE-451) vulnerability in Uutils Coreutils. Its CVSS base score is 3.3 (Low).

Operationally, ranked at the 2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified map to SI-2 (Flaw Remediation) and AC-16 (Security and Privacy Attributes) — see the control section below for these in your framework.

OWASP Top 10 for Web (2025)

A06:2025 Insecure Design

EU & UK References

Vulnerability Data

The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for…

more

the effective user. This results in misleading diagnostic output that can cause automated scripts or system administrators to make incorrect decisions regarding file permissions or access control.

CWE(s)
CWE-451

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

Insufficient information to map techniques.
Confidence: LOW · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2026-35352Same product: Uutils Coreutils
CVE-2026-35356Same product: Uutils Coreutils
CVE-2026-35359Same product: Uutils Coreutils
CVE-2026-35340Same product: Uutils Coreutils
CVE-2026-35362Same product: Uutils Coreutils
CVE-2026-35367Same product: Uutils Coreutils
CVE-2026-35369Same product: Uutils Coreutils
CVE-2026-35358Same product: Uutils Coreutils
CVE-2026-35378Same product: Uutils Coreutils
CVE-2026-35350Same product: Uutils Coreutils

Affected Assets

uutils
coreutils
all versions

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)
  • SI-2 Flaw Remediation
  • AC-16 Security and Privacy Attributes
Detect
Catch it (NIST detect / respond)
  • SI-7 Software, Firmware, and Information Integrity
Harden
Shrink the surface (DISA STIG)

—

Validate
Prove the fix (OWASP ASVS)

—

Mitigating Controls (NIST 800-53 r5) AI

SI-2 Flaw Remediation good match
prevent

Directly requires timely remediation of the code flaw in the id utility that produces incorrect UID output.

AC-16 Security and Privacy Attributes partial match
prevent

Ensures security attributes such as real/effective UIDs are correctly associated and represented rather than misreported.

SI-7 Software, Firmware, and Information Integrity partial match
detect

Verifies integrity of software output and detects when diagnostic information about UIDs has been corrupted or falsified.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure SDLC practices directly address design and implementation of accurate, non-spoofable UI elements.

PR.AT-01 partial match
prevents

User awareness training helps people recognize and avoid harm from UI misrepresentation such as phishing, but does not prevent the flaw itself.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

A.8.29 Security testing in development and acceptance mostly match
detects

Security testing can detect UI misrepresentation vulnerabilities before deployment.

A.6.3 Information security awareness, education and training partial match
prevents

Security awareness training can teach users to recognize UI misrepresentation and phishing attempts.

A.8.23 Web filtering partial match
mitigates

Web filtering can block known phishing sites that exploit UI misrepresentation.

A.8.25 Secure development life cycle partial match
prevents

Secure development lifecycle includes UI/UX security requirements that can prevent misrepresentation of critical information.

A.8.26 Application security requirements partial match
prevents

Application security requirements can mandate proper display and validation of critical information in the UI.

A.8.28 Secure coding partial match
prevents

Secure coding practices can prevent UI flaws that obscure or spoof critical information.

References