A Time-of-Check to Time-of-Use (TOCTOU) race condition vulnerability exists in the mkfifo utility of uutils coreutils. The flaw occurs when the utility creates a FIFO and then performs a path-based chmod operation to set permissions. A local attacker with write access to the parent directory can exploit this timing window by swapping the newly created FIFO for a symbolic link between these two operations. This causes the chmod call to be redirected to an arbitrary file, potentially enabling privilege escalation if the mkfifo utility is executed with elevated privileges.