|
Vulnerabilities
< Back

CVE-2026-27140

Updated on 08 Apr 2026

Severity

8.8 High severity

Details

CVSS score
8.8
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE ID
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

SWIG file names containing ‘cgo’ and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass.

Details

Affected product:
AlmaLinux 9.2 ESU , Alpine Linux 3.22 , Alpine Linux 3.23 , Debian 12 , Debian 13 , TuxCare 9.6 ESU
Affected packages:
golang @ 1.22.9 (+23 more)