Critical Vulnerability in rust-coreutils Package: CVE-2026-35381
Summary
DEBIAN-CVE-2026-35381: ... Affects rust-coreutils versions 0.0.17-2 – 0.7.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The rust-coreutils package is a collection of core utilities written in Rust, designed to provide essential command-line tools for various tasks in a Unix-like environment. It includes functionalities such as file manipulation, text processing, and system management. The package is widely used in Debian-based systems, making it crucial for system administrators and developers. However, a recently identified vulnerability (CVE-2026-35381) poses a significant risk to users of this package.
Vulnerability Detail
CVE-2026-35381 is a vulnerability that affects the rust-coreutils package across multiple Debian versions (12, 13, and 14). The vulnerability originates from improper handling of certain inputs, which could lead to unexpected behavior or even arbitrary code execution. This flaw can be exploited by attackers to compromise systems running the affected versions of the package, potentially leading to data breaches or system integrity issues. It is essential for users to understand the implications of this vulnerability and take appropriate action.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As of now, there are no specific workarounds mentioned for this vulnerability. Users are advised to apply the patch as soon as it becomes available or to limit the use of the affected package until an update can be applied.
Conclusion
The rust-coreutils package has a critical vulnerability (CVE-2026-35381) that affects multiple Debian versions. Users are strongly encouraged to update their packages to mitigate the risks associated with this vulnerability. Regular monitoring and timely updates are essential for maintaining system security.
See every vulnerability recorded for rust-coreutils →
FAQ
CVE-2026-35381 is a vulnerability in the rust-coreutils package that can lead to unexpected behavior or arbitrary code execution.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
If you cannot update the package immediately, consider limiting the use of rust-coreutils until a patch is applied or explore alternative tools that do not have this vulnerability.
Yes, if exploited, this vulnerability could lead to data breaches or loss of system integrity, making it critical to address it promptly.
More information can be found in the official Debian security advisories or by visiting the vulnerability database at https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-35381.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for rust-coreutils.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
