Critical Vulnerability in rust-coreutils: CVE-2026-35339 Exposed
Summary
DEBIAN-CVE-2026-35339: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
rust-coreutils is a package that provides essential command-line utilities for Rust programming language applications. It is designed to enhance the functionality of Rust by offering a suite of core utilities that are commonly used in various programming tasks. However, the package has been identified to have a vulnerability that could potentially compromise the security of applications relying on it.
Vulnerability Detail
CVE-2026-35339 is a vulnerability that originates from a flaw in the rust-coreutils package. This vulnerability could allow an attacker to exploit the affected systems, leading to unauthorized access or manipulation of data. The technical aspects of this vulnerability include improper handling of certain inputs, which could result in unexpected behavior or crashes, thereby exposing the system to further attacks.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can limit the use of rust-coreutils in your applications until the package is updated. Additionally, consider implementing input validation to mitigate the risk of exploitation.
Conclusion
The rust-coreutils package has been identified with a critical vulnerability (CVE-2026-35339) that poses a risk to applications utilizing it. It is essential to update the package to the latest version to mitigate potential threats. Users are encouraged to monitor their applications for vulnerabilities using tools like Vulert.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35339 is a security vulnerability found in the rust-coreutils package that could allow unauthorized access to systems.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If immediate updates are not possible, consider implementing input validation and limiting the use of rust-coreutils in your applications as a temporary measure.
More information can be found in the official Debian security advisory or by visiting the Vulert website.
Yes, a patched version of the rust-coreutils package is available. Ensure to update your package to the latest version.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
