The install utility in uutils coreutils versions before 0.6.0 is vulnerable to a TOCTOU race condition. Specifically, the process of unlinking an existing destination file followed by recreating it without the O_EXCL flag creates a race window. A local attacker can exploit this window by replacing the file path with a symbolic link, causing privileged writes to be redirected and potentially overwrite arbitrary system files. This vulnerability is classified under CWE-367 and has a moderate severity rating. No known exploits are reported in the wild. The advisory is a duplicate and has been withdrawn, but remains for reference.

A local attacker with low privileges can exploit the race condition to redirect privileged file writes to arbitrary system files, potentially leading to integrity and availability impacts. Confidentiality impact is not indicated. The vulnerability could allow overwriting critical system files, which may result in system compromise or denial of service.

Patch status is not yet confirmed — check the vendor advisory GHSA-239g-2685-54x3 for current remediation guidance. Since this advisory is a duplicate and withdrawn, refer to the original advisory for official fixes or mitigations. Until a patch is applied, avoid running the vulnerable install utility in untrusted environments or with elevated privileges.