Miggo at BlackHat 2026!
Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| uu_chmod | rust | < 0.6.0 | 0.6.0 |
Miggo AIRoot Cause AnalysisThe vulnerability is a logical error in handling the return value within the chmod function of the Chmoder struct, located in src/uu/chmod/src/chmod.rs. The provided patch abd581f62e97d0b147306ac40eac13af71c6fbba clearly shows the fix. The line r = self.walk_dir_with_context(file, true); is changed to r = self.walk_dir_with_context(file, true).and(r);. This change demonstrates that previously, the result r was being overwritten in each iteration of the recursive directory walk. Consequently, the program's exit code would only reflect the outcome of the last file processed, masking any errors that occurred before it. This could cause scripts relying on the exit code to misinterpret a partial failure as a complete success. The identified vulnerable function, Chmoder.chmod, is the direct location of this flawed logic. The analysis of the patch provides high confidence in this finding.
Chmoder.chmodsrc/uu/chmod/src/chmod.rs