Skip to content
NewA calmer, faster ZeroHour

CVE-2025-47906

CVSS 3.1
6.5 medium
EPSS
<1%p46
Published
·
Modified
Analyze CVE-2025-47906 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", ".", and ".."), can result in the binaries listed in the PATH being unexpectedly returned.

Vendors
golang
Products
go
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

In the news

1 story