The ChownExecutor component in uutils coreutils versions prior to 0.6.0 has a flaw where the exit code returned by recursive chown and chgrp operations is determined solely by the last file processed. If the last operation succeeds but earlier ones fail (e.g., due to permission errors), the command incorrectly returns a success exit code (0). This behavior can cause scripts relying on the exit code to mistakenly believe all ownership changes were successful, leading to possible security misconfigurations. This issue is tracked as CWE-253 (Incorrect Check of Function Return Value).

Scripts and automated processes that rely on the exit code of uutils coreutils chown or chgrp commands to verify successful ownership or group changes may be misled. This can result in security misconfigurations where ownership or group changes were only partially applied, potentially exposing files or directories to unauthorized access or improper permissions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should manually verify ownership changes or use alternative tools that correctly report errors during recursive operations.