Critical Vulnerability in rust-coreutils Package: CVE-2026-35353
Summary
DEBIAN-CVE-2026-35353: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The rust-coreutils package is a collection of utilities written in Rust, designed to provide essential command-line tools for file manipulation, system management, and other core functionalities in a Unix-like environment. It is widely used in various Debian distributions, including Debian 12, 13, and 14. The package is known for its performance and safety features inherent to the Rust programming language. However, it has recently been identified as vulnerable to a critical security issue, CVE-2026-35353, which may expose systems to potential exploits.
Vulnerability Detail
CVE-2026-35353 is a critical vulnerability that affects the rust-coreutils package across multiple Debian versions. This vulnerability originates from improper handling of certain inputs, which could lead to arbitrary code execution or privilege escalation. Attackers may exploit this vulnerability to gain unauthorized access to system resources, potentially compromising the integrity and confidentiality of the affected systems. It is crucial for users of rust-coreutils to understand the implications of this vulnerability and take appropriate measures to mitigate the risks.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As of now, there are no specific workarounds provided for this vulnerability. Users are advised to apply the patch as soon as it becomes available to mitigate the risks associated with CVE-2026-35353.
Conclusion
CVE-2026-35353 represents a significant security risk for users of the rust-coreutils package in Debian. It is essential to stay informed about this vulnerability and take immediate action to update the affected package to ensure system security.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35353 is a critical vulnerability affecting the rust-coreutils package, which could allow attackers to execute arbitrary code or escalate privileges.
The vulnerability affects rust-coreutils in Debian versions 12, 13, and 14.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Yes, users should update to the latest patched version of rust-coreutils to mitigate the vulnerability.
While there are no specific workarounds, it is recommended to monitor the situation and apply the patch as soon as it is available.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
