Critical Vulnerability in rust-coreutils: CVE-2026-35347
Summary
DEBIAN-CVE-2026-35347: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
rust-coreutils is a collection of core utilities for the Rust programming language, providing essential tools for file manipulation, text processing, and system management. It is widely used in various applications and systems built with Rust, making it a crucial component for developers. The vulnerability identified as CVE-2026-35347 affects multiple versions of rust-coreutils across Debian ecosystems, potentially exposing systems to security risks.
Vulnerability Detail
CVE-2026-35347 is a security vulnerability that originates from improper handling of certain inputs within the rust-coreutils package. This flaw can lead to unexpected behavior, including potential data corruption or unauthorized access to sensitive information. The vulnerability affects all versions starting from 0, making it critical for users to address it promptly to avoid exploitation.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can limit the exposure of the affected package by restricting its use in critical applications until an update can be applied. Additionally, consider implementing access controls to mitigate potential risks associated with this vulnerability.
Conclusion
The CVE-2026-35347 vulnerability in rust-coreutils poses significant risks to systems using this package. It is crucial for users to update to the latest patched version to mitigate these risks. Temporary workarounds can be implemented while awaiting updates, and tools like Vulert can assist in monitoring for vulnerabilities.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35347 is a security vulnerability in the rust-coreutils package that can lead to data corruption or unauthorized access.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without any signup.
If an immediate update is not possible, implement access controls and limit the use of the affected package in critical applications as a temporary measure.
Yes, a patched version of rust-coreutils is available in the Debian repositories. Users should update to this version as soon as possible.
More information can be found in the official Debian security advisories and the CVE database, as well as on the Vulert platform.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
