CVE-2026-35377

{
  "id": "CVE-2026-35377",
  "sourceIdentifier": "[email protected]",
  "published": "2026-04-22T17:16:42.577",
  "lastModified": "2026-10-26T21:10:00.170",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A logic error in the env utility of uutils coreutils causes a failure to correctly parse command-line arguments when utilizing the -S (split-string) option. In GNU env, backslashes within single quotes are treated literally (with the exceptions of \\\\ and \\'). However, the uutils implementation incorrectly attempts to validate these sequences, resulting in an \"invalid sequence\" error and an immediate process termination with an exit status of 125 when encountering valid but unrecognized sequences like \\a or \\x. This divergence from GNU behavior breaks compatibility for automated scripts and administrative workflows that rely on standard split-string semantics, leading to a local denial of service for those operations."
    },
    {
      "lang": "es",
      "value": "Un error lógico en la utilidad “env” de “uutils coreutils” provoca un fallo al analizar correctamente los argumentos de línea de comandos al utilizar la opción “-S (split-string)”. En “GNU env”, las barras invertidas dentro de comillas simples se tratan literalmente (con las excepciones de “\\\\” y “\\’”). Sin embargo, la implementación de “uutils” intenta validar incorrectamente estas secuencias, lo que resulta en un error de ’secuencia no válida’ y una terminación inmediata del proceso con un estado de salida de 125 al encontrar secuencias válidas pero no reconocidas como “\\a” o “\\x”. Esta divergencia del comportamiento de “GNU” rompe la compatibilidad para scripts automatizados y flujos de trabajo administrativos que dependen de la semántica estándar de “split-string”, lo que lleva a una denegación de servicio local para esas operaciones."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Uutils",
          "product": "coreutils",
          "defaultStatus": "affected",
          "collectionURL": "https://github.com/uutils",
          "packageName": "coreutils",
          "platforms": [
            "Linux",
            "Unix",
            "macOS"
          ],
          "repo": "https://github.com/uutils/coreutils"
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
          "baseScore": 3.3,
          "baseSeverity": "LOW",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "LOW"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-04-22T17:00:56.507647Z",
          "id": "CVE-2026-35377",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:uutils:coreutils:-:*:*:*:*:rust:*:*",
              "matchCriteriaId": "4A9AF9E4-E17C-48AD-8051-B49998618839"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/uutils/coreutils/pull/11512",
      "source": "[email protected]",
      "tags": [
        "Issue Tracking"
      ]
    }
  ]
}