CVE-2026-56857 | Google Go standard library up to 1.26.8/1.27.1 os/internal/syscall/windows Root.Mkdir/Root.MkdirAll mount point

SecurityVulns
Yanac

A vulnerability, which was classified as critical, has been found in Google Go standard library up to 1.26.8/1.27.1. Affected is the function Root.Mkdir/Root.MkdirAll of the component os/internal/syscall/windows. Performing a manipulation results in insecure operation on windows junction / mount point.

This vulnerability is cataloged as CVE-2026-56857. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More