Critical Vulnerability in rust-coreutils: CVE-2026-35345
Summary
DEBIAN-CVE-2026-35345: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
rust-coreutils is a collection of core utilities for the Rust programming language, providing essential tools for file manipulation, system management, and data processing. It is widely used in various applications and environments, making its security paramount. This package is integral to many Rust-based projects, and any vulnerabilities can have widespread implications.
Vulnerability Detail
CVE-2026-35345 is a critical vulnerability affecting the rust-coreutils package across multiple Debian versions. The vulnerability originates from improper handling of certain inputs, which could allow an attacker to execute arbitrary code or cause a denial of service. The ramifications of this vulnerability are severe, potentially compromising the integrity and availability of systems utilizing rust-coreutils.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can limit the exposure of the rust-coreutils package by restricting its usage or implementing additional input validation in applications that rely on it. However, this is not a substitute for applying the necessary updates.
Conclusion
CVE-2026-35345 poses a significant risk to users of the rust-coreutils package across various Debian versions. It is crucial to apply the necessary updates to mitigate this vulnerability and protect your systems from potential exploitation.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35345 is a critical vulnerability in the rust-coreutils package that could allow attackers to execute arbitrary code.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If immediate updates are not possible, consider implementing input validation or limiting the use of rust-coreutils until a patch can be applied.
More information can be found in the official Debian security advisories and the CVE database.
Yes, if exploited, this vulnerability could lead to data loss or corruption, depending on the nature of the attack.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
