The cut utility in uutils coreutils mishandles the -s option with newline delimiters by not verifying the only_delimited flag in the cut_fields_newline_char_delim function. This flaw causes the utility to output lines that should have been suppressed, violating the intended behavior of only printing delimited lines. The vulnerability is categorized under CWE-670 (Always-Incorrect Control Flow Implementation) and has a CVSS 3.1 base score of 3.3, indicating low severity. There is no vendor advisory or patch information available, and no known exploits in the wild.

This vulnerability can lead to the inclusion of unexpected non-delimited lines in the output of the cut utility when using the -s option with newline delimiters. This may cause downstream scripts or processes that depend on strict output filtering to receive unintended data, potentially affecting data processing accuracy or logic. There is no impact on confidentiality or availability, and the integrity impact is limited to incorrect output data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should be cautious when using the -s option with newline delimiters in uutils coreutils cut utility and consider alternative tools or manual filtering to ensure output correctness.