Critical Vulnerability in rust-coreutils: CVE-2026-35371
Summary
DEBIAN-CVE-2026-35371: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
rust-coreutils is a collection of core utilities for the Rust programming language, providing essential command-line tools for file manipulation, text processing, and system management. It is widely used in various applications and systems that rely on Rust for performance and safety. However, the package has been identified with a critical vulnerability that could potentially compromise system integrity.
Vulnerability Detail
CVE-2026-35371 is a vulnerability that arises from improper handling of certain inputs within the rust-coreutils package. This flaw can lead to unexpected behavior, including potential data corruption or unauthorized access to sensitive information. The vulnerability is present in all versions of the package, making it critical for users to address it promptly to avoid exploitation.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can limit the use of rust-coreutils in critical applications until the package is updated. Additionally, consider implementing input validation to mitigate the risk of exploitation.
Conclusion
The rust-coreutils package is currently affected by a critical vulnerability (CVE-2026-35371) that requires immediate attention. Users are advised to update their packages to the latest version to mitigate risks. For those unable to update right away, implementing workarounds can help reduce exposure until a fix is applied.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35371 is a critical vulnerability found in the rust-coreutils package that can lead to data corruption or unauthorized access.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If immediate updates are not possible, consider implementing input validation and limiting the use of rust-coreutils in sensitive applications as a temporary measure.
More information about rust-coreutils can be found in its official documentation and repositories, which detail its features and usage.
Vulert monitors and alerts for open-source vulnerabilities in your software using just a manifest file like package-lock.json, providing real-time insights.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
