Critical Vulnerability in rust-coreutils: CVE-2026-35344
Summary
DEBIAN-CVE-2026-35344: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
rust-coreutils is a collection of core utilities for the Rust programming language, designed to provide essential command-line tools for file manipulation, system monitoring, and more. It is widely used in various applications and environments, making its security a priority. The vulnerability identified as CVE-2026-35344 affects multiple versions of rust-coreutils across Debian ecosystems, potentially exposing systems to security risks.
Vulnerability Detail
CVE-2026-35344 is a security vulnerability that originates from improper handling of certain inputs within the rust-coreutils package. This flaw can lead to unauthorized access or manipulation of system resources, allowing attackers to execute arbitrary commands or disrupt system operations. The vulnerability affects all versions of rust-coreutils starting from its introduction, making it critical for users to address it promptly.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary measure, users can limit the exposure of the rust-coreutils package by restricting access to the command-line utilities it provides. This can be done by modifying user permissions or using containerization to isolate applications that rely on rust-coreutils.
Conclusion
CVE-2026-35344 poses a significant security risk to users of the rust-coreutils package across multiple Debian ecosystems. It is crucial to update to the latest patched version to mitigate potential threats. Users are encouraged to monitor their applications for vulnerabilities using tools like Vulert for ongoing security assurance.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35344 is a security vulnerability in the rust-coreutils package that can lead to unauthorized access and manipulation of system resources.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If exploited, this vulnerability could allow attackers to execute arbitrary commands, disrupt system operations, or gain unauthorized access to sensitive data.
Yes, users should update their rust-coreutils package to the latest version to apply the necessary security patches.
If an immediate update is not possible, consider implementing workarounds such as restricting access to the utilities provided by rust-coreutils.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
