Vulnerability record · CVE-2018-1000622 · published 9 July 2018

CVE-2018-1000622: Rust-lang rust uncontrolled search path element vulnerability

Rust Lang · Rust

The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1.

7.8 CVSS 3.0 High EPSS 1.8% · top 22.0% CWE-427 · Uncontrolled search path element

7.8CVSS 3.0 base score, v2 6.8

1.8%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

10References

17 Jun 2026Last modified by NVD

Description

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Rust Rust Lang

References

Link	Tags
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00076.html
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00006.html
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00031.html
https://groups.google.com/forum/#%21topic/rustlang-security-announcements/4ybxYLTtXuM
https://security.gentoo.org/glsa/201812-11	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00076.html
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00006.html
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00031.html
https://groups.google.com/forum/#%21topic/rustlang-security-announcements/4ybxYLTtXuM
https://security.gentoo.org/glsa/201812-11	Third Party Advisory

Track CVE-2018-1000622 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2024-24576Fedoraproject fedora os command injection vulnerabilityRust is a programming language. The Rust Security Response WG was notified that the Rust standard library prior to version 1.77.2 did not properly es…EPSS 20%9 Apr 2024 9.8CVE-2024-3566Haskell process library command injection vulnerabilityA command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess fu…EPSS 6.9%10 Apr 2024 9.8CVE-2021-31162Rust-lang rust double free vulnerabilityIn the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the element panics.EPSS 2.9%14 Apr 2021 9.8CVE-2021-28879Rust-lang rust integer overflow vulnerabilityIn the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a…EPSS 2.4%11 Apr 2021 9.8CVE-2020-36318Rust-lang rust double free vulnerabilityIn the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition.…EPSS 1.7%11 Apr 2021 9.8CVE-2018-1000810Rust-lang rust integer overflow vulnerabilityThe Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflo…EPSS 3.0%8 Oct 2018 9.1CVE-2021-29922Rust-lang rust vulnerabilitylibrary/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginning of an IP address string, w…EPSS 2.6%7 Aug 2021 8.8CVE-2024-43402Rust-lang rust os command injection vulnerabilityRust is a programming language. The fix for CVE-2024-24576, where `std::process::Command` incorrectly escaped arguments when invoking batch files on …EPSS 0.74%4 Sep 2024

Source: NIST National Vulnerability Database (record CVE-2018-1000622), CISA KEV, FIRST EPSS (scores of 2026-10-03). This page is refreshed as NVD updates the record.