CVE-2026-35380 is a logic error vulnerability in the cut utility of uutils coreutils prior to version 0.8.0. The utility incorrectly treats the two-byte string of two single quotes ('') as an empty delimiter, mapping it to the NUL character for both the -d and --output-delimiter options. This can cause silent data corruption or logic errors in automated scripts and data pipelines that rely on literal delimiters, as the utility may split or join data on NUL bytes instead of the intended characters. The issue is fixed in version 0.8.0.