Critical Vulnerability in rust-coreutils: CVE-2026-35372 Exposes Security Risks
Summary
DEBIAN-CVE-2026-35372: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
rust-coreutils is a package that provides essential command-line utilities for Rust programming language applications. It is designed to enhance the functionality of Rust by offering a set of core utilities that are commonly used in various programming tasks. The package is integral for developers who rely on Rust for building efficient and reliable software. However, it has been identified that rust-coreutils is vulnerable to CVE-2026-35372, which could potentially compromise the security of applications utilizing this package.
Vulnerability Detail
CVE-2026-35372 is a vulnerability that arises from improper handling of certain inputs within the rust-coreutils package. This flaw can lead to unexpected behavior, including potential denial of service or arbitrary code execution, depending on how the vulnerable code is exploited. The vulnerability was introduced in version 0 and affects all subsequent versions. It is crucial for developers to be aware of this issue as it poses significant risks to the integrity and security of applications built with rust-coreutils.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can limit the use of rust-coreutils in your applications until a patch is applied. Additionally, consider implementing input validation to mitigate the risk of exploitation through malformed inputs.
Conclusion
CVE-2026-35372 poses a significant threat to applications utilizing the rust-coreutils package. It is essential for developers to stay informed about this vulnerability and take appropriate measures to update their packages and implement workarounds until a permanent fix is available. Utilizing tools like Vulert can aid in monitoring and managing open-source vulnerabilities effectively.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35372 is a security vulnerability in the rust-coreutils package that can lead to denial of service or arbitrary code execution.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
If an immediate update is not possible, consider implementing input validation as a temporary workaround to reduce the risk of exploitation.
Yes, a patched version of rust-coreutils is expected to be released. Always check your Debian repository for the latest updates.
The vulnerability can lead to severe consequences, including application crashes, unauthorized access, and potential data breaches.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
