CVE-2026-59676: Selinuxproject Selinux

Medium severity, CVSS 5.8. EPSS: 0.1% chance of exploitation in the next 30 days.

A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned files, This issue affects policycoreutils through 3.10.

Affected products

• Selinuxproject Selinux: up to and including 3.10

Published 2026-07-23. Last modified 2026-07-23.