Critical Vulnerability in rust-coreutils: CVE-2026-35369
Summary
DEBIAN-CVE-2026-35369: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
rust-coreutils is a package that provides essential command-line utilities for Rust programming language applications. It is designed to offer a variety of core functionalities, including file manipulation, system operations, and more. This package is widely used in Rust-based projects, making it crucial for developers to ensure its security and integrity.
Vulnerability Detail
CVE-2026-35369 is a vulnerability identified in the rust-coreutils package, which could potentially allow unauthorized access or manipulation of system resources. The vulnerability originates from insufficient validation of input parameters, leading to possible exploitation by attackers. If successfully exploited, this could result in data breaches or system compromise, making it imperative for users to address this issue promptly.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary measure, users can restrict access to the affected utilities or limit their usage until the package is updated. Additionally, implementing strict input validation in applications utilizing rust-coreutils can help mitigate the risk.
Conclusion
The CVE-2026-35369 vulnerability in the rust-coreutils package poses significant risks to users and their applications. It is essential to update the package to the latest version to mitigate these risks. Users should also consider implementing workarounds until they can apply the necessary updates.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35369 is a security vulnerability found in the rust-coreutils package that may allow unauthorized access to system resources.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If exploited, this vulnerability could lead to unauthorized data access, manipulation of system resources, or even complete system compromise.
Yes, users should update the rust-coreutils package to the latest version to apply the necessary patches.
As a workaround, restrict access to the affected utilities and implement strict input validation in your applications.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
