Every CVE Search/ Get API key

CVE-2026-59676

Local File Deletion Attack Vector in rm_rf() in seunshare

5.8 MediumFix available

A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned files,

This issue affects policycoreutils through 3.10.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
High

Exploit likelihood

0.10%Unchanged since Jul 23, 2026
90%50%10%1%

What each source reports

CVE List Score used 5.8

Local File Deletion Attack Vector in rm_rf() in seunshare

A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned files,

This issue affects policycoreutils through 3.10.

Record
CVE-2026-59676
CVSS 4.0
5.8 MediumCVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
Weakness
CWE-367
Updated
2026-11-02
EUVDEUVD-2026-47888 5.8

A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned files,

This issue affects policycoreutils through 3.10.

Record
EUVD-2026-47888
CVSS 4.0
5.8 MediumCVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-j6qh-f45v-j454 5.8

A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux...

A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned files,

This issue affects policycoreutils through 3.10.

Record
GHSA-j6qh-f45v-j454
CVSS 4.0
5.8 MediumCVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness
CWE-367
Updated
2026-11-02
NVD 5.8

A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned files,

This issue affects policycoreutils through 3.10.

Record
CVE-2026-59676
CVSS 4.0
5.8 MediumCVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness
CWE-367
Updated
2026-11-02
OSVDEBIAN-CVE-2026-59676 5.8

A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned files, This issue affects policycoreutils through 3.10.

Record
DEBIAN-CVE-2026-59676
CVSS 4.0
5.8 MediumCVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVRHSA-2026:44343 5.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:44343
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-59676 5.8

A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned files, This issue affects policycoreutils through 3.10.

Record
UBUNTU-CVE-2026-59676
CVSS 4.0
5.8 MediumCVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
policycoreutils
Debian:12
 before 2.7-1
2.7-1
policycoreutils
Debian:13
 before 2.7-1
2.7-1
policycoreutils
Debian:14
 before 2.7-1
2.7-1
selinux-python
Debian:13
 before 3.7-1
3.7-1
selinux-python
Debian:14
 before 3.7-1
3.7-1
policycoreutils
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:3.11-2.1.hum1
0:3.11-2.1.hum1
policycoreutils-dbus
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:3.11-2.1.hum1
0:3.11-2.1.hum1
policycoreutils-devel
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:3.11-2.1.hum1
0:3.11-2.1.hum1
policycoreutils-gui
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:3.11-2.1.hum1
0:3.11-2.1.hum1
policycoreutils-newrole
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:3.11-2.1.hum1
0:3.11-2.1.hum1
Show 8 moreShow less
Affected packages
PackageAffectedFixed
policycoreutils-python-utils
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:3.11-2.1.hum1
0:3.11-2.1.hum1
policycoreutils-restorecond
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:3.11-2.1.hum1
0:3.11-2.1.hum1
policycoreutils-sandbox
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:3.11-2.1.hum1
0:3.11-2.1.hum1
python3-policycoreutils
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:3.11-2.1.hum1
0:3.11-2.1.hum1
selinux-python
Ubuntu:18.04:LTS
 All versions, plus listed versions
2.7-2
 None known
selinux-python
Ubuntu:20.04:LTS
 All versions, plus listed versions
2.9-23.0-13.0-1build1
 None known
selinux-python
Ubuntu:22.04:LTS
 All versions, plus listed versions
3.1-1build13.3-1
 None known
selinux-python
Ubuntu:24.04:LTS
 All versions, plus listed versions
3.5-1
 None known

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-59676 is a medium vulnerability (CVSS 5.8) in Selinuxproject Selinux, published July 23, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.10%, the 0th percentile. Fixed in policycoreutils 2.7-1.

References

Show 11 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open