Description
The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | rustc | 1.27.1+dfsg1-1~exp1 | — |
| Debian 13 | rustc | 1.27.1+dfsg1-1~exp1 | — |
| Debian 12 | rustc | 1.27.1+dfsg1-1~exp1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Devtools 2018 | rust-toolset-1.29 +10 | 1.29.2-1.el7 | RHEA-2018:3584 |
| Red Hat Devtools 2018 | rust-toolset-1.29-cargo +1 | 1.29.0-1.el7 | RHEA-2018:3584 |
| Red Hat Devtools 2018 | rust-toolset-1.29-cargo-vendor | 0.1.17-1.el7 | RHEA-2018:3584 |
| Red Hat Devtools 2018 | rust-toolset-1.29-clippy-preview | 0.0.212-1.el7 | RHEA-2018:3584 |
| Red Hat Devtools 2018 | rust-toolset-1.29-rls-preview | 0.130.0-1.el7 | RHEA-2018:3584 |
| Red Hat Devtools 2018 | rust-toolset-1.29-rustfmt-preview | 0.99.1-1.el7 | RHEA-2018:3584 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP1 | rust | 1.36.0-4.1 | SUSE-SU-2019:2755-1 |
| SLES 15 | rust | 1.24.1-3.6.1 | SUSE-SU-2019:2439-1, SUSE-SU-2018:3357-1, SUSE-RU-2019:0386-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | rust1.53 | 1.53.0-2.5 | openSUSE-SU-2024:11360-1 |
| openSUSE Leap 15.1 | rust | 1.36.0-lp151.5.4.1 | openSUSE-SU-2019:2294-1, openSUSE-SU-2019:2244-1, openSUSE-SU-2019:2203-1 |
| openSUSE Leap 15.1 | rust-cbindgen | 0.8.7-lp151.2.2 | openSUSE-SU-2019:2294-1, openSUSE-SU-2019:2203-1 |
Advisories 9
- RHEA-2018:3584 Red Hat Enhancement Advisory: new packages: rust-toolset-1.29 Red Hat Security Advisories (RHSA) · Jun 26, 2026
- openSUSE-SU-2024:11360-1 cargo1.53-1.53.0-2.5 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:3357-1 Security update for rust SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-RU-2019:0386-1 Security update for rust SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:2294-1 Security update for rust SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2755-1 Security update for rust SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:2203-1 Security update for rust SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:2244-1 Security update for rust SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2439-1 Security update for rust SUSE / openSUSE Security Updates · Feb 4, 2026
References
- GLSA-201812-11 vendor-advisory
- https://groups.google.com/forum/#%21topic/rustlang-security-announcements/4ybxYLTtXuM
- openSUSE-SU-2019:2203 vendor-advisory
- openSUSE-SU-2019:2244 vendor-advisory
- openSUSE-SU-2019:2294 vendor-advisory