THREAT OPS › Threat News › [NVD] CVE-2025-61731 (HIGH 7.8) — Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config command. An attacker can
[NVD] CVE-2025-61731 (HIGH 7.8) — Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config command. An attacker can
CVE-2025-61731 CVSS: 7.8 HIGH Published: 2026-01-28T20:16:10.073
Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config command. An attacker can provide a "--log-file" argument to this directive, ca
MITRE ATT&CK techniques
- Malicious FileT1204.002
Indicators of compromise
- CVE-2025-61731cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-61731