AIKIDO-2026-366698
uu_cp is vulnerable to Race Condition (TOCTOU)
79
High Risk
This Affects:
uu_cpTL;DR
When cp preserves extended attributes with -a or --preserve=xattr, it checks the destination with a metadata call that does not follow symlinks, then changes permissions with a call that does. A local user with write access to the destination directory can swap the destination for a symlink between those calls. A privileged cp then changes permissions through the link on an arbitrary file, adding world writable access and enabling local privilege escalation. The fix changes permissions on a descriptor bound to the checked file instead of re-resolving the path.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you copy with extended attribute preservation into a directory writable by an untrusted local user.
Background info
uu_cp is vulnerable to Race Condition (TOCTOU) in versions 0.0.29 - 0.10.0.
How to fix this
Upgrade the uu_cp library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.