A TOCTOU race condition exists in the mv utility of uutils coreutils during cross-device moves. A local attacker with write access to the destination directory can exploit a timing window to replace the destination with a symbolic link, causing the move operation to overwrite an arbitrary file. This affects versions up to 0.8.0 and has a medium severity rating with CVSS 6.3.