Critical Vulnerability in rust-coreutils Package: CVE-2026-35355
Summary
DEBIAN-CVE-2026-35355: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The rust-coreutils package is a collection of core utilities written in Rust, designed to provide essential command-line tools for Unix-like operating systems. It includes functionalities for file manipulation, system monitoring, and other essential tasks. This package is widely used in various applications and systems, making its security paramount. The vulnerability identified as CVE-2026-35355 affects multiple versions of this package across Debian ecosystems 12, 13, and 14.
Vulnerability Detail
CVE-2026-35355 is a critical vulnerability that originates from improper handling of certain inputs within the rust-coreutils package. This flaw can potentially allow an attacker to execute arbitrary code or cause a denial of service, leading to significant disruptions in system operations. The vulnerability is present from the initial version of the package, making it crucial for users to address it promptly to avoid exploitation.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can limit the exposure of the rust-coreutils package by restricting access to systems where it is installed or by using alternative utilities until the package is updated. Additionally, monitoring system logs for unusual activity can help mitigate potential exploitation.
Conclusion
The CVE-2026-35355 vulnerability in the rust-coreutils package poses a significant risk to systems using this software. It is essential for users to update their packages promptly and consider temporary workarounds to mitigate risks until a full resolution is implemented. Regular monitoring and security practices are recommended to safeguard against potential exploitation.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35355 is a critical vulnerability in the rust-coreutils package that can lead to arbitrary code execution or denial of service.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If immediate updates are not possible, consider implementing access restrictions and monitoring system logs for any suspicious activity as a temporary measure.
Yes, a patched version of the rust-coreutils package is available. Users should update to this version as soon as possible.
Failure to address this vulnerability could result in unauthorized access, data breaches, or system outages, significantly impacting operations.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
