CLEANSTART-2026-IF00623 Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content

🗓️ 06 Oct 2026 00:35:15Reported by GoogleType

osv🔗 osv.dev👁 3 Views

Security vulnerability in the go1.27 package allows writing to attacker-controlled files.

Reporter	Title	Published	Views	Family All 1000
attackerkb	CVE-2025-61731	28 Jan 202619:30	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2026-1381)	5 Feb 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : amazon-ssm-agent (ALAS2023-2026-1499)	1 Apr 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : golang, --advisory ALAS2-2026-3136 (ALAS-2026-3136)	5 Feb 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : amazon-ssm-agent, --advisory ALAS2-2026-3207 (ALAS-2026-3207)	19 Mar 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : runc, --advisory ALAS2NITRO-ENCLAVES-2026-092 (ALASNITRO-ENCLAVES-2026-092)	19 Feb 202600:00	–	nessus
Tenable Nessus	AlmaLinux 10 : golang (ALSA-2026:5941)	27 Mar 202600:00	–	nessus
Tenable Nessus	AlmaLinux 9 : golang (ALSA-2026:5942)	27 Mar 202600:00	–	nessus
Tenable Nessus	AlmaLinux 8 : go-toolset:rhel8 (ALSA-2026:6949)	10 Apr 202600:00	–	nessus
Tenable Nessus	Rocky Linux 10.1 [CIQ] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc Multiple Vulnerabilities (crlsa-2026_5941)	1 Oct 202600:00	–	nessus

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-IF00623.json
osv	www.osv.dev/vulnerability/CVE-2025-61731
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-61731

08 Oct 2026 16:47Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.8

EPSS0.0062

go1.27 cmd/go write to file