CVE-2025-68120

CVE-2025-68120

Medium · published December 30, 2025

CVSS v3.1
5.4
EPSS
0%
Percentile
38.4
In the wild
Unconfirmed
What it is

To prevent unexpected untrusted code execution, the Visual Studio Code Go extension is now disabled in Restricted Mode.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00454 · 38.4th percentile
Published
2025-12-30T05:15Z
Affected products (1)
ProductVersionsFixed in
go/go< 0.52.10.52.1
References (3)
https://groups.google.com/g/golang-dev/c/CHG4qfcicBU/m/4tanFUymDQAJ · [email protected]https://nvd.nist.gov/vuln/detail/CVE-2025-68120 · [email protected]https://pkg.go.dev/vuln/GO-2025-4249 · [email protected]
EPSS history
Timeline
  • 29 DEC 23:46Z
    Unexpected untrusted code execution in github.com/golang/vscode-go
    cvelistv5