A vulnerability in uutils coreutils mkfifo allows for the unauthorized modification of permissions on existing files. When mkfifo fails to create a FIFO because…

A vulnerability in uutils coreutils mkfifo allows unauthorized modification of file permissions when attempting to create a FIFO at a path where a file already exists. The mkfifo command fails to terminate properly and continues to execute a set_permissions call, changing existing file permissions to default mode (often 644). This can expose sensitive files like SSH private keys to other system users, creating a significant security risk for file access control.