CVE-2025-61732

Published: Feb 5, 2026

Modified: Feb 5, 2026

PUBLISHED

A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.

Vendor	Product	Versions
Go toolchain	cmd/cgo	affected `0 - < 1.24.13` affected `1.25.0-0 - < 1.25.7`

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.