Vulnerability in Selinuxproject Selinux
CVE-2026-59676
A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned files, This issue affects policycoreutils through 3.10.
Vulnerability class: TOCTOU (Time-of-Check to Time-of-Use)
EPSS: 0.001 (0.4th percentile) — read the EPSS interpretation.
Affected products
- Selinuxproject Selinux — versions 0