CVE-2025-68120: Undefined Security Weakness

To prevent unexpected untrusted code execution, the Visual Studio Code Go extension is now disabled in Restricted Mode...

PT-2025-54700

To prevent unexpected untrusted code execution, the Visual Studio Code Go extension is now disabled in Restricted Mode...

CVE-2025-68120

A Remote Code Execution (RCE) vulnerability exists in the Visual Studio Code Go extension due to CWE-184 (Incomplete Blacklist) . The extension failed to block specific settings, such as go.buildFlags, go.testFlags, and go.vetFlags, in Restricted Mode , allowing them to bypass the security bounda...