Critical Vulnerability in rust-coreutils Package: CVE-2026-35378
Summary
DEBIAN-CVE-2026-35378: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The rust-coreutils package is a collection of core utilities written in Rust, designed to provide essential command-line tools for users and developers. It is part of the Debian ecosystem, which includes various versions such as Debian 12, 13, and 14. This package is widely used for its efficiency and performance in handling system tasks. However, it has recently been identified as vulnerable to CVE-2026-35378, which poses significant security risks.
Vulnerability Detail
CVE-2026-35378 is a vulnerability that affects the rust-coreutils package, introduced in version 0. This vulnerability can lead to potential exploitation, allowing attackers to execute arbitrary code or cause denial of service. The origin of this vulnerability stems from flaws in the implementation of core utilities, which may not properly validate input or handle errors. The ramifications of this vulnerability could be severe, impacting system integrity and user data security.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As of now, there are no specific workarounds mentioned for CVE-2026-35378. Users are advised to apply the patch as soon as it becomes available or consider using alternative utilities until the vulnerability is resolved.
Conclusion
In summary, CVE-2026-35378 is a critical vulnerability affecting the rust-coreutils package across multiple Debian versions. Users are urged to stay informed about updates and apply patches as they become available to safeguard their systems against potential exploitation.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35378 is a security vulnerability affecting the rust-coreutils package, which can lead to arbitrary code execution or denial of service.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If you cannot update the package, consider using alternative command-line utilities until a patch is available.
As of now, the urgency for a patch has not yet been assigned, but users should monitor updates from the Debian repositories.
The potential impacts include unauthorized code execution and denial of service, which can compromise system security and data integrity.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
