A TOCTOU race condition exists in the mkfifo utility of uutils coreutils (CVE-2026-35352). The utility creates a FIFO and then changes its permissions using chmod. A local attacker with write access to the parent directory can replace the FIFO with a symbolic link between creation and chmod, causing chmod to affect an arbitrary file. This can lead to privilege escalation if mkfifo is run with elevated privileges.