PT-2026-5930 · Go+2 · Go+2

Ryotak · Published 2026-02-03 · Updated 2026-04-30 · CVE-2025-61732

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Go (affected versions not specified)

Description A difference in how Go and C/C++ interpret comments can allow malicious code to be hidden within the compiled binary when using cgo. This technique, known as code smuggling, enables attackers to inject code that may be executed unexpectedly. There is no information available regarding the number of potentially affected devices or any real-world incidents where this issue has been exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

ALSA-2026:2706

ALSA-2026:2708

ALSA-2026:2709

AZL-76688

AZL-76743

AZL-78937

BDU:2026-02553

BIT-GOLANG-2025-61732

CLEANSTART-2026-AC65885

CLEANSTART-2026-AE87452

CLEANSTART-2026-AL68245

CLEANSTART-2026-AN01004

CLEANSTART-2026-AR20742

CLEANSTART-2026-BB17877

CLEANSTART-2026-BB70412

CLEANSTART-2026-BK17545

CLEANSTART-2026-BK44511

CLEANSTART-2026-BP32212

CLEANSTART-2026-CB01846

CLEANSTART-2026-CH77232

CLEANSTART-2026-CK42797

CLEANSTART-2026-CN84623

CLEANSTART-2026-CP95927

CLEANSTART-2026-CZ07385

CLEANSTART-2026-DB61851

CLEANSTART-2026-DF22934

CLEANSTART-2026-DG06447

CLEANSTART-2026-DI15427

CLEANSTART-2026-DK61762

CLEANSTART-2026-DN20646

CLEANSTART-2026-DO09088

CLEANSTART-2026-DO31246

CLEANSTART-2026-DP35743

CLEANSTART-2026-EB74978

CLEANSTART-2026-EU58098

CLEANSTART-2026-EW27017

CLEANSTART-2026-FK30234

CLEANSTART-2026-FU04414

CLEANSTART-2026-FU47971

CLEANSTART-2026-FX51482

CLEANSTART-2026-FZ57809

CLEANSTART-2026-GC37751

CLEANSTART-2026-GI67088

CLEANSTART-2026-GX29850

CLEANSTART-2026-GY48351

CLEANSTART-2026-GZ72045

CLEANSTART-2026-HA09227

CLEANSTART-2026-HQ78610

CLEANSTART-2026-HX94762

CLEANSTART-2026-IX47217

CLEANSTART-2026-IY77127

CLEANSTART-2026-IY78242

CLEANSTART-2026-IY92636

CLEANSTART-2026-JD68539

CLEANSTART-2026-JK38734

CLEANSTART-2026-JK84667

CLEANSTART-2026-JT73156

CLEANSTART-2026-JW59894

CLEANSTART-2026-KK98885

CLEANSTART-2026-KT25851

CLEANSTART-2026-LI04631

CLEANSTART-2026-LM72903

CLEANSTART-2026-LP76319

CLEANSTART-2026-LU81821

CLEANSTART-2026-MO53190

CLEANSTART-2026-MQ21261

CLEANSTART-2026-MZ18595

CLEANSTART-2026-NV36169

CLEANSTART-2026-OX88144

CLEANSTART-2026-PF41398

CLEANSTART-2026-PJ76318

CLEANSTART-2026-PP64690

CLEANSTART-2026-PV93827

CLEANSTART-2026-PW47027

CLEANSTART-2026-PW57640

CLEANSTART-2026-QA91937

CLEANSTART-2026-QF85840

CLEANSTART-2026-QJ92322

CLEANSTART-2026-RD09851

CVE-2025-61732

ECHO-8954-A128-8728

GO-2026-4433

MGASA-2026-0035

OESA-2026-1698

OESA-2026-1699

OESA-2026-1700

OESA-2026-1701

OESA-2026-1702

OESA-2026-1703

OPENSUSE-SU-2026:10163-1

OPENSUSE-SU-2026:10164-1

OPENSUSE-SU-2026:10220-1

OPENSUSE-SU-2026:20214-1

OPENSUSE-SU-2026:20220-1

OPENSUSE-SU-2026:20308-1

RHSA-2026:2706

RHSA-2026:2708

RHSA-2026:2709

RHSA-2026:3192

RHSA-2026:3193

RHSA-2026:3468

RHSA-2026:3469

RHSA-2026:3470

RHSA-2026:3471

RHSA-2026:3472

RHSA-2026:3473

RHSA-2026:3489

RHSA-2026:7291

RHSA-2026:7385

SUSE-SU-2026:0403-1

SUSE-SU-2026:0426-1

SUSE-SU-2026:0427-1

SUSE-SU-2026:0687-1

SUSE-SU-2026:0760-1

SUSE-SU-2026:0789-1

SUSE-SU-2026:0790-1

SUSE-SU-2026:0947-1

SUSE-SU-2026:0977-1

SUSE-SU-2026:20428-1

SUSE-SU-2026:20429-1

SUSE-SU-2026:20629-1

Affected Products

Go

Red Os

Rocky Linux

References · 580

• https://nvd.nist.gov/vuln/detail/CVE-2025-61723 · Security Note
• https://osv.dev/vulnerability/OESA-2026-1699 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-JK84667 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-61732 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-LU81821 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-35469 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:20220-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61728 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-58189 · Security Note
• https://go.dev/cl/734220 · Patch
• https://osv.dev/vulnerability/ALSA-2026:2709 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-66564 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-27137 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-QF85840 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-HA09227 · Vendor Advisory