Critical Vulnerability in rust-coreutils Package: CVE-2026-35374
Summary
DEBIAN-CVE-2026-35374: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The rust-coreutils package is a collection of core utilities written in Rust, designed to provide essential command-line tools for Unix-like operating systems. It includes functionalities such as file manipulation, text processing, and system management. As an integral part of the Debian ecosystem, it is widely used in various applications and systems, making its security paramount.
Vulnerability Detail
CVE-2026-35374 is a critical vulnerability that affects the rust-coreutils package across multiple Debian versions (12, 13, and 14). The vulnerability originates from improper handling of certain inputs, which could lead to unexpected behavior or potential exploitation by malicious actors. The ramifications of this vulnerability could include unauthorized access to system resources, data corruption, or denial of service, thereby compromising the integrity and availability of the affected systems.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can restrict access to the affected utilities or limit their usage until the package is updated. This can be done by modifying user permissions or using alternative tools that do not exhibit this vulnerability.
Conclusion
The rust-coreutils package is critical for many systems, and the CVE-2026-35374 vulnerability poses significant risks. Users are urged to update their packages promptly and consider workarounds if immediate updates are not feasible. Staying informed about vulnerabilities is essential for maintaining system security.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35374 is a critical vulnerability in the rust-coreutils package that can lead to unauthorized access and system instability.
The vulnerability affects rust-coreutils in Debian versions 12, 13, and 14.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If immediate updates are not possible, consider restricting access to the affected utilities or using alternative tools until the patch is applied.
More information can be found in the official Debian security advisories and the CVE database.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
