CVE-2026-27140 Code execution vulnerability in SWIG code generation in cmd/go

SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass...

CVE-2026-27140

CVE-2026-27140 is disclosed across multiple sources as a trust-layer bypass in Go toolchain when using cgo with SWIG, enabling potential code execution at build time. SUSE advisories for openSUSE Leap 16.0 (go1.25.9) and go1.26.2 fix this, with patches listed as CVE-2026-27140 in the SUSE advisor...

CVE-2026-27140 Code execution vulnerability in SWIG code generation in cmd/go

SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass...

GO-2026-4871 Code execution vulnerability in SWIG code generation in cmd/go

SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass...