← Back

CVE-2026-35343

nvd nist
Published: Apr 22, 2026Modified: Jun 17, 2026

JSON object

Loading...
3.3
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Exploitability: 1.8 / Impact: 1.4
Source: security@ubuntu.com (Secondary)

Description

The cut utility in uutils coreutils incorrectly handles the -s (only-delimited) option when a newline character is specified as the delimiter. The implementation fails to verify the only_delimited flag in the cut_fields_newline_char_delim function, causing the utility to print non-delimited lines that should have been suppressed. This can lead to unexpected data being passed to downstream scripts that rely on strict output filtering.

Affected (1)

Products: Uutils: Coreutils
1 product
Coreutils
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Before 0.7.0

References (2)

Source: security@ubuntu.com
Issue TrackingPatch
Source: security@ubuntu.com
Release Notes

Timeline

No history available yet.