Critical Vulnerability in rust-coreutils: CVE-2026-35340
Summary
DEBIAN-CVE-2026-35340: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
rust-coreutils is a collection of core utilities written in Rust, designed to provide essential command-line functionalities for Unix-like operating systems. It is known for its performance and safety features, leveraging Rust's memory safety guarantees. However, the package is currently affected by a critical vulnerability that could potentially compromise system integrity.
Vulnerability Detail
CVE-2026-35340 is a vulnerability identified in the rust-coreutils package that allows for unauthorized access or manipulation of system resources. This vulnerability originates from improper input validation, which could lead to arbitrary code execution or privilege escalation. Attackers exploiting this vulnerability may gain control over affected systems, leading to severe security breaches.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can restrict access to the rust-coreutils utilities or run them in a controlled environment until the package is updated. This can be achieved by modifying user permissions or utilizing containerization technologies.
Conclusion
The rust-coreutils package is currently vulnerable to CVE-2026-35340, which poses significant security risks. Users are strongly advised to update their packages promptly and consider workarounds until the update can be applied. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system security.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35340 is a critical vulnerability in the rust-coreutils package that can lead to unauthorized access and manipulation of system resources.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
Exploitation of this vulnerability could lead to arbitrary code execution, privilege escalation, and complete control over the affected system.
Yes, a patched version of rust-coreutils is available. Users should update their packages to the latest version to mitigate the risk.
If immediate updates are not possible, consider restricting access to the affected utilities or running them in a controlled environment as a temporary measure.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
