Vulnerability in Go Standard Library Internal/syscall/unix
CVE-2026-32282
On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently igno…
EPSS: 0.000 (1.3th percentile) — read the EPSS interpretation.
Affected products
- Go Standard Library Internal/syscall/unix — versions 0, 1.26.0-0