BaseFortify

Publication date: 2025-12-30

Last updated on: 2026-01-06

Assigner: Go Project

Description

To prevent unexpected untrusted code execution, the Visual Studio Code Go extension is now disabled in Restricted Mode.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-30

Last Modified

2026-01-06

Generated

2026-07-06

AI Q&A

2025-12-30

EPSS Evaluated

2026-07-05

NVD

CVE-2025-68120

Affected Vendors & Products

Vendor	Product	Version / Range
go	go	to 0.52.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-NVD-CWE-noinfo

Attack-Flow Graph

Executive Summary

This vulnerability involves the Visual Studio Code Go extension potentially allowing unexpected untrusted code execution. To mitigate this risk, the extension is now disabled when Visual Studio Code is in Restricted Mode.

Impact Analysis

If exploited, this vulnerability could allow untrusted code to execute unexpectedly within the Visual Studio Code Go extension, potentially compromising your development environment or system. Disabling the extension in Restricted Mode helps prevent this risk.

Mitigation Strategies

To mitigate this vulnerability, ensure that the Visual Studio Code Go extension is disabled in Restricted Mode to prevent unexpected untrusted code execution.

Hi! I’m here to help you understand CVE-2025-68120. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70