CVE-2026-97040 | Google Go up to 1.26.10/1.27.3 cmd/go/link code injection

November 11, 2026 Yanac

A vulnerability identified as critical has been detected in Google Go up to 1.26.10/1.27.3. This affects an unknown part of the component cmd/go/link. Performing a manipulation results in code injection.

This vulnerability is identified as CVE-2026-97040. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More