CoreCVE
Back

CRITICAL

Code execution vulnerability in SWIG code generation in cmd/go

Published Apr 8, 2026

Description

SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-641

CWE-863

Incorrect Authorization

References (27)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Go
Published Apr 8, 2026
Updated Sep 10, 2026
Reserved Feb 17, 2026
Link CVE-2026-27140
CISA Vulnrichment
Updated Apr 9, 2026
NVD
Status Modified
Modified Sep 10, 2026
Link CVE-2026-27140
Red Hat
Severity Important
Public date Apr 8, 2026
Links CVE-2026-27140 - Bugzilla
ENISA EUVD
Assigner Go
Published Apr 8, 2026
Updated Sep 10, 2026
Exploited since n/a
Link EUVD-2026-20002
EUVD-2026-20002