CVE-2026-35365 describes a vulnerability in the mv utility of uutils coreutils where symbolic links within directory trees are expanded rather than preserved during moves across filesystem boundaries. This improper link resolution (CWE-59) can lead to resource exhaustion through excessive disk usage or time consumption, unintended copying of sensitive data, and potential infinite recursion caused by symlink loops. The vulnerability affects version 0 of the product, with no known exploits in the wild and no confirmed remediation level or patch available at this time.

The vulnerability can cause resource exhaustion by copying large external directories referenced by symlinks, potentially filling disk space or consuming excessive time. It may also lead to unintended duplication of sensitive data into locations where it should not reside, increasing the risk of data exposure. Additionally, symlink loops can cause infinite recursion and repeated copying, further exacerbating resource consumption and operational disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when using the mv utility on directory trees containing symbolic links across filesystem boundaries, especially with untrusted or sensitive data. Avoid moving directories with complex symlink structures or consider alternative tools that correctly preserve symlinks.