Critical Vulnerability in rust-coreutils: CVE-2026-35377
Summary
DEBIAN-CVE-2026-35377: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
rust-coreutils is a package that provides essential command-line utilities for Rust programming language applications. It is designed to enhance the functionality of Rust applications by offering a set of core utilities that are commonly used in various programming tasks. The package is widely utilized in Debian ecosystems, including versions 12, 13, and 14. However, it has recently been identified as vulnerable to CVE-2026-35377, which poses significant security risks.
Vulnerability Detail
CVE-2026-35377 is a critical vulnerability that affects the rust-coreutils package across multiple Debian versions. The vulnerability originates from improper handling of certain inputs, which could allow an attacker to execute arbitrary code or cause denial of service. The ramifications of this vulnerability are severe, as it could lead to unauthorized access to system resources or compromise the integrity of applications relying on rust-coreutils. It is crucial for users to understand the technical aspects of this vulnerability to mitigate potential risks.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As of now, there are no specific workarounds mentioned for this vulnerability. Users are advised to apply the patch as soon as it becomes available to mitigate risks associated with CVE-2026-35377.
Conclusion
The rust-coreutils package is currently vulnerable to CVE-2026-35377, which poses significant security risks. Users are urged to update their packages promptly to mitigate these risks. Regular monitoring and awareness of vulnerabilities are essential for maintaining system security.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35377 is a critical vulnerability affecting the rust-coreutils package in Debian, which could allow attackers to execute arbitrary code.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
It is recommended to monitor the situation closely and apply the update as soon as possible to protect your system.
More information can be found in the official Debian security advisories and the CVE database.
Yes, if exploited, this vulnerability could lead to unauthorized access and potential data loss.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
