Critical Vulnerability in rust-coreutils: CVE-2026-35358
Summary
DEBIAN-CVE-2026-35358: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
rust-coreutils is a collection of core utilities written in Rust, designed to provide essential command-line tools for file manipulation, system management, and other fundamental operations in a Unix-like environment. It is known for its performance and safety features, leveraging Rust's memory safety guarantees. However, recent findings have revealed a vulnerability that could potentially compromise the integrity and security of systems utilizing this package.
Vulnerability Detail
CVE-2026-35358 is a vulnerability identified in the rust-coreutils package, which allows for potential exploitation due to improper handling of certain inputs. This vulnerability can lead to unauthorized access or manipulation of system resources, posing a significant risk to system security. The issue originates from the package's failure to adequately validate user inputs, which could be exploited by attackers to execute arbitrary code or escalate privileges.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can limit the exposure of the rust-coreutils package by restricting access to the affected utilities or by using alternative tools until the package is updated. Additionally, implementing input validation on user-provided data can help mitigate the risk of exploitation.
Conclusion
The rust-coreutils package has been identified with a critical vulnerability (CVE-2026-35358) that poses significant risks to system security. Users are advised to update their packages promptly and consider workarounds until a full resolution is implemented. Utilizing tools like Vulert can help in monitoring vulnerabilities effectively.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35358 is a security vulnerability found in the rust-coreutils package that can lead to unauthorized access or manipulation of system resources.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
The vulnerability can allow attackers to execute arbitrary code or escalate privileges, which can compromise the security and integrity of the system.
Yes, a patched version of rust-coreutils is available. Users should update their package to the latest version to mitigate the risk.
If an immediate update is not possible, consider implementing input validation and restricting access to the affected utilities as a temporary workaround.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
