Critical Vulnerability in rust-coreutils: CVE-2026-35350
Summary
DEBIAN-CVE-2026-35350: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
rust-coreutils is a collection of core utilities written in Rust, designed to provide essential command-line tools for Unix-like operating systems. It includes functionalities for file manipulation, text processing, and system management. The package is widely used in various applications and environments, making its security critical. The vulnerability identified as CVE-2026-35350 poses a significant risk to systems utilizing this package, potentially leading to unauthorized access or system compromise.
Vulnerability Detail
CVE-2026-35350 is a vulnerability that affects all versions of rust-coreutils starting from its initial release. The issue arises from improper input validation, which could allow an attacker to execute arbitrary code or commands. This vulnerability can be exploited remotely, leading to severe consequences such as data breaches, system integrity loss, and unauthorized control over the affected systems. It is crucial for users of rust-coreutils to be aware of this vulnerability and take necessary actions to mitigate the risks.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can restrict access to the rust-coreutils utilities by modifying user permissions or using firewall rules to limit exposure. However, this is not a permanent solution and updating the package is strongly recommended.
Conclusion
The CVE-2026-35350 vulnerability in rust-coreutils poses a serious risk to users of the package. It is essential to update to the latest version to protect against potential exploits. Users should also consider using tools like Vulert to monitor for vulnerabilities in their applications.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35350 is a security vulnerability affecting the rust-coreutils package, which could allow attackers to execute arbitrary code.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
If immediate updates are not possible, consider implementing access restrictions as a temporary workaround.
Yes, a patched version of rust-coreutils is available. Users should update to the latest version to mitigate the vulnerability.
More information can be found in the official Debian security advisories and the CVE database.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
