PT-2025-53815 · Microsoft · Visual Studio Code Go Extension

·

CVE-2025-68120

·

Published

2025-12-29

·

Updated

2026-07-30

CVSS v2.0

5.5

Medium

VectorAV:N/AC:L/Au:S/C:P/I:N/A:P
Name of the Vulnerable Software and Affected Versions Visual Studio Code Go extension (affected versions not specified)
Description The Visual Studio Code Go extension was disabled in Restricted Mode to prevent unexpected untrusted code execution.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-01279
CVE-2025-68120
GHSA-FJMR-7667-8V4P
GO-2025-4249
OPENSUSE-SU-2026:21483-1
SUSE-SU-2026:0037-1

Affected Products

Visual Studio Code Go Extension