Critical Vulnerability in rust-coreutils: CVE-2026-35352
Summary
DEBIAN-CVE-2026-35352: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
rust-coreutils is a collection of core utilities written in Rust, designed to provide essential command-line tools for file manipulation, system management, and other fundamental tasks in Unix-like operating systems. It is known for its performance and safety features, leveraging Rust's memory safety guarantees. However, the package has been identified with a vulnerability that could potentially impact its functionality and security.
Vulnerability Detail
CVE-2026-35352 is a critical vulnerability affecting rust-coreutils across multiple Debian versions (12, 13, and 14). The vulnerability originates from a flaw in the core utilities that could allow an attacker to exploit the system, leading to unauthorized access or manipulation of system files. This vulnerability poses significant risks, especially in environments where rust-coreutils is deployed for critical operations.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can limit the use of rust-coreutils in critical environments until the package is updated. Additionally, consider using alternative utilities that do not exhibit this vulnerability.
Conclusion
CVE-2026-35352 represents a serious vulnerability in the rust-coreutils package across several Debian versions. Users are strongly advised to update their packages to the latest version to protect their systems from potential exploitation. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35352 is a critical vulnerability found in the rust-coreutils package that could allow unauthorized access to system files.
You can use the Vulert platform to check if your application is affected by this vulnerability without any installation. Visit Vulert Scanner for more details.
The vulnerability could lead to unauthorized access or manipulation of system files, posing significant security risks.
Yes, a patched version of rust-coreutils is available. Users should update their packages to the latest version to mitigate the risk.
As a temporary measure, limit the use of rust-coreutils in critical environments and consider using alternative utilities.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
