PT-2026-38563 · Google · Go

Harshit Gupta · Published 2026-04-08 · Updated 2026-05-21 · CVE-2026-39819

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions Go (affected versions not specified)

Description The "go bug" command writes to two files with predictable names in the system temporary directory, such as "/tmp". An attacker with access to this directory can create a symbolic link (symlink)—a file that points to another file or directory—using one of these predictable names, which causes the command to overwrite the target file of the symlink.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

BDU:2026-07951

BIT-GOLANG-2026-39819

CLEANSTART-2026-AN32474

CLEANSTART-2026-AP95632

CLEANSTART-2026-AQ65185

CLEANSTART-2026-AY89602

CLEANSTART-2026-BD19566

CLEANSTART-2026-BG69533

CLEANSTART-2026-BN09969

CLEANSTART-2026-BS27946

CLEANSTART-2026-CD71342

CLEANSTART-2026-CH40794

CLEANSTART-2026-CK61704

CLEANSTART-2026-CR00119

CLEANSTART-2026-DH72490

CLEANSTART-2026-DM19620

CLEANSTART-2026-EI06494

CLEANSTART-2026-GB83728

CLEANSTART-2026-GE45898

CLEANSTART-2026-GJ69402

CLEANSTART-2026-GQ00159

CLEANSTART-2026-GY76045

CLEANSTART-2026-GZ35045

CLEANSTART-2026-IP78312

CLEANSTART-2026-KA21986

CLEANSTART-2026-KL61187

CLEANSTART-2026-KO66630

CLEANSTART-2026-LA67881

CLEANSTART-2026-LG79681

CLEANSTART-2026-LI56163

CLEANSTART-2026-MI82983

CLEANSTART-2026-MJ60235

CLEANSTART-2026-MK07381

CLEANSTART-2026-ML42911

CLEANSTART-2026-MV81821

CLEANSTART-2026-MX15076

CLEANSTART-2026-NT10973

CLEANSTART-2026-OD56729

CLEANSTART-2026-OF37807

CLEANSTART-2026-OH43332

CLEANSTART-2026-OX06093

CLEANSTART-2026-PB32291

CLEANSTART-2026-PK19530

CLEANSTART-2026-PV53006

CLEANSTART-2026-QP84300

CLEANSTART-2026-QS87161

CLEANSTART-2026-QU88766

CLEANSTART-2026-RD75979

CLEANSTART-2026-RX06063

CLEANSTART-2026-RZ44006

CLEANSTART-2026-RZ88142

CLEANSTART-2026-SE34232

CLEANSTART-2026-SL86558

CLEANSTART-2026-TD06078

CLEANSTART-2026-TD94714

CLEANSTART-2026-TH33219

CLEANSTART-2026-TK06108

CLEANSTART-2026-TL66481

CLEANSTART-2026-UY49411

CLEANSTART-2026-VJ54611

CLEANSTART-2026-VU08393

CLEANSTART-2026-WB86581

CVE-2026-39819

GO-2026-4978

OPENSUSE-SU-2026:10723-1

OPENSUSE-SU-2026:10741-1

Affected Products

Go

References · 441

• https://nvd.nist.gov/vuln/detail/CVE-2026-27138 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-58190 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-MK07381 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-47914 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-OH43332 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-39819 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-GQ00159 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-39825 · Security Note
• https://pkg.go.dev/vuln/GO-2026-4978 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27144 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-47911 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-44973 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-4673 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-58188 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-47907 · Security Note