Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-39822

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open "symlink" even when "symlink" is a symbolic link pointing outside of the root.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 14.0%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2026-39822
  • Golang » Go » Version: 1.24.0
    cpe:2.3:a:golang:go:1.24.0
  • Golang » Go » Version: 1.24.1
    cpe:2.3:a:golang:go:1.24.1
  • Golang » Go » Version: 1.24.10
    cpe:2.3:a:golang:go:1.24.10
  • Golang » Go » Version: 1.24.11
    cpe:2.3:a:golang:go:1.24.11
  • Golang » Go » Version: 1.24.12
    cpe:2.3:a:golang:go:1.24.12
  • Golang » Go » Version: 1.24.13
    cpe:2.3:a:golang:go:1.24.13
  • Golang » Go » Version: 1.24.2
    cpe:2.3:a:golang:go:1.24.2
  • Golang » Go » Version: 1.24.3
    cpe:2.3:a:golang:go:1.24.3
  • Golang » Go » Version: 1.24.4
    cpe:2.3:a:golang:go:1.24.4
  • Golang » Go » Version: 1.24.5
    cpe:2.3:a:golang:go:1.24.5
  • Golang » Go » Version: 1.24.6
    cpe:2.3:a:golang:go:1.24.6
  • Golang » Go » Version: 1.24.7
    cpe:2.3:a:golang:go:1.24.7
  • Golang » Go » Version: 1.24.8
    cpe:2.3:a:golang:go:1.24.8
  • Golang » Go » Version: 1.24.9
    cpe:2.3:a:golang:go:1.24.9
  • Golang » Go » Version: 1.25
    cpe:2.3:a:golang:go:1.25
  • Golang » Go » Version: 1.25.0
    cpe:2.3:a:golang:go:1.25.0
  • Golang » Go » Version: 1.25.1
    cpe:2.3:a:golang:go:1.25.1
  • Golang » Go » Version: 1.25.10
    cpe:2.3:a:golang:go:1.25.10
  • Golang » Go » Version: 1.25.11
    cpe:2.3:a:golang:go:1.25.11
  • Golang » Go » Version: 1.25.2
    cpe:2.3:a:golang:go:1.25.2
  • Golang » Go » Version: 1.25.3
    cpe:2.3:a:golang:go:1.25.3
  • Golang » Go » Version: 1.25.4
    cpe:2.3:a:golang:go:1.25.4
  • Golang » Go » Version: 1.25.5
    cpe:2.3:a:golang:go:1.25.5
  • Golang » Go » Version: 1.25.6
    cpe:2.3:a:golang:go:1.25.6
  • Golang » Go » Version: 1.25.7
    cpe:2.3:a:golang:go:1.25.7
  • Golang » Go » Version: 1.25.8
    cpe:2.3:a:golang:go:1.25.8
  • Golang » Go » Version: 1.25.9
    cpe:2.3:a:golang:go:1.25.9
  • Golang » Go » Version: 1.27
    cpe:2.3:a:golang:go:1.27


Products
Pricing
Contact Us

Shodan ® - All rights reserved