Description
The -go bug- command writes to two files with predictable names in the system temporary directory (for example, -/tmp-). An attacker with access to the temporary directory can create a symlink in one of these names, causing -go bug- to overwrite the target of the symlink.
CVSS 5.3EPSS 0.179%Risk 0.54
View source- Published
- 2026-05-07 20:16:43
- Affected versions
- unknown
- Type
- Core software
- Vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N