CVE-2026-35339 describes a flaw in the recursive mode (-R) of the chmod utility within uutils coreutils. The utility determines its final exit code based solely on the last file processed, ignoring errors encountered on previous files. This incorrect check of function return values (CWE-253) can cause the command to return a success exit code (0) despite failures on some files, potentially misleading automated scripts or processes that depend on accurate exit status for permission changes.

Scripts and automation relying on chmod's exit code to verify successful permission changes may proceed under a false assumption of success. This can result in sensitive files retaining restrictive or incorrect permissions, potentially causing security or operational issues. The vulnerability does not affect confidentiality or availability directly but impacts integrity by misreporting the success of permission changes.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should manually verify permissions after recursive chmod operations or avoid relying solely on exit codes for success confirmation.