Critical Vulnerability in rust-coreutils: CVE-2026-35342 Exposes Systems to Potential Exploits
Summary
DEBIAN-CVE-2026-35342: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
rust-coreutils is a collection of essential utilities for the Rust programming language, designed to provide a robust set of command-line tools for file manipulation, system management, and more. It is widely used in various applications and environments, making its security paramount. The vulnerability CVE-2026-35342 affects multiple versions of rust-coreutils across Debian ecosystems, posing a risk to systems utilizing these packages.
Vulnerability Detail
CVE-2026-35342 is a security vulnerability that originates from improper handling of certain inputs within the rust-coreutils package. This flaw can lead to unexpected behavior, potentially allowing an attacker to execute arbitrary code or cause a denial of service. The vulnerability affects all versions of rust-coreutils from its inception, making it critical for users to address it promptly to safeguard their systems.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can limit the exposure of the affected utilities by restricting their use or implementing additional security measures such as input validation and sanitization in applications that utilize rust-coreutils.
Conclusion
CVE-2026-35342 is a significant vulnerability affecting the rust-coreutils package across multiple Debian ecosystems. Users are urged to update their packages promptly to mitigate potential risks. Implementing workarounds can provide temporary relief, but a permanent fix through updates is essential for long-term security.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35342 is a security vulnerability in the rust-coreutils package that can lead to arbitrary code execution or denial of service.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by CVE-2026-35342 without needing to sign up.
If an immediate update is not possible, consider implementing input validation and restricting the use of affected utilities as a temporary measure.
Yes, a patched version of rust-coreutils is available. Users should update to the latest version to mitigate the risk.
More details can be found in the official Debian security advisories and the vulnerability database at https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-35342.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
