Critical Vulnerability in rust-coreutils: CVE-2026-35361
Summary
DEBIAN-CVE-2026-35361: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
rust-coreutils is a package that provides essential command-line utilities for Rust programming language applications. It is designed to offer a set of core functionalities that are commonly used in various Rust projects, enhancing the efficiency and performance of Rust applications. However, this package is currently affected by a critical vulnerability identified as CVE-2026-35361, which could potentially compromise the security of applications relying on it.
Vulnerability Detail
CVE-2026-35361 is a vulnerability that originates from improper handling of certain inputs in the rust-coreutils package. This flaw may allow an attacker to exploit the affected applications, leading to unauthorized access or execution of arbitrary code. The ramifications of this vulnerability can be severe, potentially allowing attackers to manipulate system resources or access sensitive data, thus posing a significant risk to the integrity and confidentiality of the affected systems.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can limit the exposure of applications relying on rust-coreutils by implementing strict input validation and sanitization measures. This can help mitigate the risk of exploitation until an official patch is applied.
Conclusion
In summary, CVE-2026-35361 is a critical vulnerability affecting the rust-coreutils package, which can lead to severe security risks. It is crucial for users to update their packages promptly to mitigate these risks. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35361 is a critical vulnerability in the rust-coreutils package that may allow unauthorized access or execution of arbitrary code.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
The vulnerability can lead to unauthorized access, execution of arbitrary code, and manipulation of system resources, posing significant risks to security.
Yes, users can update the rust-coreutils package to the latest version to apply the patch for CVE-2026-35361.
If immediate updates are not possible, implement strict input validation and sanitization measures as a temporary workaround.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
