Critical Vulnerability in rust-coreutils: CVE-2026-35362
Summary
DEBIAN-CVE-2026-35362: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
rust-coreutils is a collection of core utilities written in Rust, designed to provide efficient and reliable command-line tools for various tasks in Unix-like operating systems. It is part of the Rust programming ecosystem and aims to enhance performance and safety compared to traditional core utilities. However, the package has been identified with a critical vulnerability that could potentially affect its users.
Vulnerability Detail
CVE-2026-35362 is a vulnerability that affects all versions of rust-coreutils. The origin of this vulnerability stems from improper handling of certain inputs, which could lead to unexpected behavior or crashes. If exploited, this vulnerability may allow attackers to execute arbitrary code or cause denial of service, posing significant risks to system integrity and availability.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If an immediate update is not feasible, consider restricting access to the affected utilities or using alternative tools until the vulnerability is patched. Additionally, monitor your system for any unusual activity that may indicate exploitation attempts.
Conclusion
CVE-2026-35362 presents a significant risk to users of rust-coreutils. It is crucial to update to the latest version to protect against potential exploits. Users are encouraged to monitor their systems and utilize tools like Vulert for real-time vulnerability alerts.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35362 is a critical vulnerability in the rust-coreutils package that could lead to arbitrary code execution or denial of service.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
Consider restricting access to the affected utilities and monitor your system for unusual activity until you can apply the update.
Yes, a patched version of rust-coreutils is available. Users should update to the latest version to mitigate the vulnerability.
You can find more information about rust-coreutils and its functionalities in the official Rust documentation and repositories.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
