CVE-2026-97038 | Go cmd/go up to 1.26.10/1.27.3 Linker code injection

November 11, 2026 Yanac

A vulnerability was found in Go cmd and go up to 1.26.10/1.27.3. It has been classified as critical. This impacts an unknown function of the component Linker. The manipulation leads to code injection.

This vulnerability is uniquely identified as CVE-2026-97038. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More