Critical Vulnerability in rust-coreutils: CVE-2026-35357
Summary
DEBIAN-CVE-2026-35357: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
rust-coreutils is a collection of core utilities for Rust programming language, providing essential functionalities for file manipulation, text processing, and system management. It is widely used in various applications and environments, making its security crucial for maintaining system integrity and performance. The vulnerability identified as CVE-2026-35357 affects multiple versions of rust-coreutils across Debian ecosystems 12, 13, and 14, posing a risk to users relying on this package.
Vulnerability Detail
CVE-2026-35357 is a security vulnerability that originates from improper handling of certain inputs within the rust-coreutils package. This flaw can potentially allow attackers to execute arbitrary code, leading to unauthorized access or control over affected systems. The vulnerability is present from version 0 and affects all subsequent releases, making it imperative for users to address it promptly to mitigate risks associated with data breaches or system compromise.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can limit the use of rust-coreutils in sensitive environments until the package is updated. Additionally, consider implementing strict input validation and sanitization in applications that utilize rust-coreutils to minimize exposure to the vulnerability.
Conclusion
The CVE-2026-35357 vulnerability in rust-coreutils poses a significant risk to users across multiple Debian ecosystems. It is essential to update the package to the latest version to safeguard against potential exploits. Users should also consider temporary workarounds and utilize tools like Vulert to monitor for vulnerabilities in their applications.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35357 is a security vulnerability in the rust-coreutils package that can lead to arbitrary code execution.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If exploited, this vulnerability could allow attackers to gain unauthorized access to systems, potentially leading to data breaches or system control.
Yes, users are advised to update to the latest version of rust-coreutils to mitigate the vulnerability.
If immediate updates are not possible, consider implementing input validation and limiting the use of rust-coreutils in sensitive applications.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
