Critical Vulnerability in rust-coreutils: CVE-2026-35360
Summary
DEBIAN-CVE-2026-35360: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
rust-coreutils is a collection of essential command-line utilities written in Rust, designed to provide a safe and efficient alternative to traditional Unix core utilities. It is widely used in various applications and systems for file manipulation, text processing, and system management tasks. The package is known for its performance and safety features, leveraging Rust's memory safety guarantees. However, it has been identified to have a critical vulnerability that could potentially compromise system integrity.
Vulnerability Detail
CVE-2026-35360 is a vulnerability found in rust-coreutils that originates from improper handling of certain input parameters, leading to potential arbitrary code execution. This vulnerability can be exploited by an attacker to execute malicious code on the affected system, which may result in unauthorized access, data loss, or system compromise. The vulnerability affects all versions of rust-coreutils starting from its initial release, making it critical for users to address it promptly.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can restrict access to the rust-coreutils utilities by modifying file permissions or using containerization to isolate applications that depend on this package. However, this is not a permanent solution and updating the package is strongly recommended.
Conclusion
CVE-2026-35360 poses a significant threat to systems using rust-coreutils. It is crucial for users to update their packages to the latest version to mitigate the risks associated with this vulnerability. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35360 is a critical vulnerability in the rust-coreutils package that allows for potential arbitrary code execution due to improper input handling.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The risks include unauthorized access to the system, data loss, and potential system compromise, which could lead to further exploitation.
Yes, a patched version of rust-coreutils is available. Users are advised to update to the latest version to mitigate the risk.
If immediate updates are not possible, consider implementing temporary workarounds such as restricting access to the utilities or using containerization.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
