Critical Vulnerability in rust-coreutils Package: CVE-2026-35380
Summary
DEBIAN-CVE-2026-35380: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The rust-coreutils package is a collection of core utilities for Rust programming language, providing essential command-line tools for file manipulation, system management, and more. It is widely used in various applications and systems built on Rust. This package is crucial for developers who rely on Rust for building efficient and reliable software. However, it has been identified to have a vulnerability that could potentially compromise the security of systems utilizing it.
Vulnerability Detail
CVE-2026-35380 is a vulnerability found in the rust-coreutils package, which originates from improper handling of certain inputs. This flaw could allow an attacker to execute arbitrary code or cause a denial of service, leading to significant disruptions in service and potential data breaches. The vulnerability affects all versions of the rust-coreutils package, making it critical for users to address it promptly.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary measure, users can restrict access to the affected utilities or run them in a controlled environment to mitigate risks until a patch is applied. Additionally, consider using alternative tools that do not exhibit this vulnerability.
Conclusion
The rust-coreutils package has been identified with a critical vulnerability (CVE-2026-35380) that requires immediate attention. Users are advised to update their packages to the latest version to mitigate risks. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time, ensuring better security for your applications.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35380 is a critical vulnerability in the rust-coreutils package that could allow attackers to execute arbitrary code.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
If immediate updates are not possible, consider implementing workarounds such as restricting access to the affected utilities.
Yes, a patched version of the rust-coreutils package is expected to be released. Users should update to this version as soon as it becomes available.
Failure to address this vulnerability could lead to unauthorized access, data breaches, or service disruptions, posing significant risks to your systems.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
