The mktemp utility in uutils coreutils improperly handles an empty TMPDIR environment variable by using the current working directory for temporary file creation instead of a secure fallback directory such as /tmp. This behavior differs from GNU mktemp, which defaults to /tmp when TMPDIR is empty. The vulnerability (CWE-377) can lead to insecure temporary file creation, potentially exposing sensitive data if the current directory has permissive access controls. The CVSS 3.1 base score is 3.3, indicating low severity, with local attack vector, low complexity, and limited confidentiality impact. No official patch or remediation level has been published, and no known exploits are reported in the wild.

Temporary files may be created in a less secure location (the current working directory) instead of a secure temporary directory, potentially allowing unauthorized users with access to that directory to read sensitive temporary data. The confidentiality impact is low, with no impact on integrity or availability reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid setting TMPDIR to an empty string or ensure that the current working directory has strict access permissions to prevent unauthorized access to temporary files.