os/exec: Unexpected paths returned from LookPath in os/exec

🗓️ 22 Dec 2025 01:38:52Reported by RedHatType

redhat🔗 access.redhat.com👁 51 Views

os/exec LookPath flaw may return executables from the search path when given '', '.', or '..' on Unix.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	10 Dec 202516:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses os/exec 1.24.3; 1.24.4, ansible-9.4.0, github.com/eclipse/paho.mqtt.golang v1.3.5 and archive/tar 1.24.2; 1.24.4 which is vulnerable to CVE-2025-47906,CVE-2025-14010,CVE-2025-10543 and CVE-2025-58183	10 Mar 202608:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container is vulnerable to incorrect binary execution [CVE-2025-47906]	1 Oct 202515:27	–	ibm
Tenable Nessus	Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2025-1161)	8 Sep 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : golang, --advisory ALAS2-2025-2984 (ALAS-2025-2984)	4 Sep 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0200: go-toolset:an8 (ALINUX3-SA-2025:0200)	29 Dec 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : go-rpm-macros (ALSA-2025:22005)	25 Nov 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : go-toolset:rhel8 (ALSA-2025:22668)	5 Dec 202500:00	–	nessus
Tenable Nessus	Rocky Linux 8 [CIQ] Security Update: delve / delve-debuginfo / delve-debugsource / go-toolset / golang / etc Multiple Vulnerabilities (crlsa-2025_22668)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9 [CIQ] Security Update: go-filesystem / go-rpm-macros / go-rpm-macros-debuginfo / etc (crlsa-2025_22005)	1 Oct 202600:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	8.6	x86_64	delve	1.7.2-1.module+el8.6.0+12972+ebab5911	delve-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64.rpm
Red Hat Enterprise Linux	8.6	x86_64	delve-debuginfo	1.7.2-1.module+el8.6.0+12972+ebab5911	delve-debuginfo-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64.rpm
Red Hat Enterprise Linux	8.6	x86_64	delve-debugsource	1.7.2-1.module+el8.6.0+12972+ebab5911	delve-debugsource-1.7.2-1.module+el8.6.0+12972+ebab5911.x86_64.rpm
Red Hat Enterprise Linux	8.6	aarch64	go-toolset	1.17.13-2.module+el8.6.0+22782+bd95fb4c	go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.aarch64.rpm
Red Hat Enterprise Linux	8.6	ppc64le	go-toolset	1.17.13-2.module+el8.6.0+22782+bd95fb4c	go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.ppc64le.rpm
Red Hat Enterprise Linux	8.6	s390x	go-toolset	1.17.13-2.module+el8.6.0+22782+bd95fb4c	go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.s390x.rpm
Red Hat Enterprise Linux	8.6	x86_64	go-toolset	1.17.13-2.module+el8.6.0+22782+bd95fb4c	go-toolset-1.17.13-2.module+el8.6.0+22782+bd95fb4c.x86_64.rpm
Red Hat Enterprise Linux	8.6	aarch64	golang	1.17.13-11.module+el8.6.0+23831+7077efd1	golang-1.17.13-11.module+el8.6.0+23831+7077efd1.aarch64.rpm
Red Hat Enterprise Linux	8.6	ppc64le	golang	1.17.13-11.module+el8.6.0+23831+7077efd1	golang-1.17.13-11.module+el8.6.0+23831+7077efd1.ppc64le.rpm
Red Hat Enterprise Linux	8.6	s390x	golang	1.17.13-11.module+el8.6.0+23831+7077efd1	golang-1.17.13-11.module+el8.6.0+23831+7077efd1.s390x.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2025-47906
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
go	www.go.dev/cl/691775
go	www.go.dev/issue/74466
groups	www.groups.google.com/g/golang-announce/c/x5MKroML2yM
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-47906
pkg	www.pkg.go.dev/vuln/GO-2025-3956
cve	www.cve.org/CVERecord

03 Oct 2026 16:10Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.5

EPSS0.0055

SSVC

os/exec lookpath path handling unix environment path security flaw executable in path