CVE-2026-94447 | Google cmd/go up to 1.26.8/1.27.1 GOMODPROXY go.sum integrity check

October 9, 2026 Yanac

A vulnerability was found in Google cmd and go up to 1.26.8/1.27.1. It has been classified as critical. This vulnerability affects unknown code of the file go.sum of the component GOMODPROXY Handler. This manipulation causes improper validation of integrity check value.

This vulnerability appears as CVE-2026-94447. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More