Critical Vulnerability in rust-coreutils Package: CVE-2026-35368
Summary
DEBIAN-CVE-2026-35368: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The rust-coreutils package is a collection of core utilities written in Rust, designed to provide essential command-line tools for various tasks in a Unix-like environment. It includes functionalities such as file manipulation, text processing, and system management. However, this package has been identified with a vulnerability that could potentially compromise system integrity and security.
Vulnerability Detail
CVE-2026-35368 is a vulnerability that affects the rust-coreutils package across multiple Debian versions (12, 13, and 14). The vulnerability originates from a flaw in the core utility functions, which could allow an attacker to execute arbitrary code or cause a denial of service. The ramifications of this vulnerability could lead to unauthorized access to sensitive data or disruption of system operations, making it critical for users to address it promptly.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can limit the execution of the rust-coreutils utilities until the package is updated. This can be done by modifying user permissions or using alternative utilities that do not exhibit this vulnerability.
Conclusion
The rust-coreutils package has a critical vulnerability identified as CVE-2026-35368, affecting multiple Debian versions. Users are urged to update their packages promptly to mitigate potential risks. Temporary workarounds are available, but the best course of action is to apply the necessary updates as soon as possible.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35368 is a vulnerability found in the rust-coreutils package that could allow attackers to execute arbitrary code or cause a denial of service.
The vulnerability affects rust-coreutils in Debian versions 12, 13, and 14.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If immediate updates are not possible, consider using alternative utilities or restricting access to the affected rust-coreutils commands as a temporary measure.
More information can be found in the official vulnerability database or by visiting the source link provided in the vulnerability details.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
