CVE-2025-68120

EUVD-2025-205668
To prevent unexpected untrusted code execution, the Visual Studio Code Go extension is now disabled in Restricted Mode.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.4 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
CISA-ADPADP
5.4 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 8%
Affected Products (NVD)
VendorProductVersion
gogo
𝑥
< 0.52.1
𝑥
= Vulnerable software versions
References
https://groups.google.com/g/golang-dev/c/CHG4qfcicBU/m/4tanFUymDQAJ
https://nvd.nist.gov/vuln/detail/CVE-2025-68120
https://pkg.go.dev/vuln/GO-2025-4249