CVE-2026-35376 is a Time-of-Check to Time-of-Use (TOCTOU) race condition vulnerability in the chcon utility of uutils coreutils during recursive operations. It arises because recursive target resolution uses fresh path lookups instead of binding traversal and label application to a consistent directory state. This allows a local attacker with write access to exploit timing-sensitive rename or symbolic link races to redirect privileged recursive relabeling to unintended files or directories, potentially modifying SELinux security labels on sensitive system objects.