Critical Vulnerability in rust-coreutils Package: CVE-2026-35356
Summary
DEBIAN-CVE-2026-35356: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The rust-coreutils package is a collection of core utilities written in Rust, designed to provide essential command-line tools for file manipulation, system management, and other fundamental tasks in a Unix-like environment. It is widely used in various applications and systems due to its performance and safety features. However, the package has been identified to have a vulnerability that could potentially impact its functionality and security.
Vulnerability Detail
CVE-2026-35356 is a vulnerability found in the rust-coreutils package that originates from improper handling of certain inputs, which may lead to unexpected behavior or crashes. This vulnerability can be exploited by an attacker to execute arbitrary code or cause denial of service, thereby compromising the integrity and availability of the system. It is crucial for users of rust-coreutils to be aware of this issue and take necessary actions to mitigate the risks associated with it.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid using the specific features of rust-coreutils that are known to be vulnerable until a patch is applied. Additionally, consider implementing input validation to mitigate the risk of exploitation.
Conclusion
The rust-coreutils package has a critical vulnerability identified as CVE-2026-35356, which poses significant risks to users. It is essential to update the package to the latest version to mitigate these risks. Users are also encouraged to explore workarounds and utilize tools like Vulert to monitor for vulnerabilities in their applications.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35356 is a vulnerability in the rust-coreutils package that can lead to arbitrary code execution or denial of service.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If immediate updates are not possible, consider using input validation as a workaround to reduce the risk of exploitation.
Yes, a patched version of the rust-coreutils package is available. Users should update to this version as soon as possible.
More information can be found in the official Debian security advisories and the CVE database.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
