Critical Vulnerability in rust-coreutils: CVE-2026-35365
Summary
DEBIAN-CVE-2026-35365: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
rust-coreutils is a package that provides essential utilities for Rust programming, enabling developers to perform common tasks efficiently. It is widely used in various applications and systems that rely on Rust for performance and safety. However, the package has been identified with a critical vulnerability that could potentially compromise the integrity and security of applications utilizing it.
Vulnerability Detail
CVE-2026-35365 is a vulnerability that originates from a flaw in the rust-coreutils package. This vulnerability could allow an attacker to exploit the system, leading to unauthorized access or execution of arbitrary code. The implications of this vulnerability are severe, as it can affect the stability and security of applications relying on rust-coreutils, making it crucial for users to address it promptly.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can limit the execution of rust-coreutils utilities in untrusted environments until the package is updated. This can be done by modifying permissions or using containerization to isolate the execution context.
Conclusion
CVE-2026-35365 poses a significant risk to applications using the rust-coreutils package. It is essential for users to update to the latest version to mitigate the risks associated with this vulnerability. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35365 is a critical vulnerability found in the rust-coreutils package that could allow unauthorized access or execution of code.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If immediate updates are not possible, consider using workarounds such as limiting the execution of rust-coreutils in untrusted environments.
Yes, a patched version of rust-coreutils is available. Users should update to the latest version to mitigate the vulnerability.
Failing to address this vulnerability could lead to unauthorized access, data breaches, and potential exploitation of the affected systems.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
