The install utility in uutils coreutils is affected by a TOCTOU race condition (CWE-367). Specifically, after unlinking a destination file, the utility recreates it using a path-based operation that does not use the O_EXCL flag. This creates a window where a local attacker can replace the intended file path with a symbolic link, causing privileged writes to be redirected to arbitrary system files. This vulnerability could allow privilege escalation or unauthorized modification of critical files. No official patch or remediation level has been provided as of the published date.

A local attacker with the ability to manipulate file paths can exploit the race condition to redirect privileged file writes to arbitrary system files. This can result in unauthorized modification of system files, potentially leading to privilege escalation or system compromise. The vulnerability does not impact confidentiality but affects integrity and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid running the vulnerable install utility in untrusted environments or with elevated privileges. Consider using alternative tools that do not exhibit this vulnerability.