CVE-2026-56857: os 0 to before 1.26.9, 1.27.0-0 to before 1.27.2; +1 more affected products

Affected technology

os · 0 to before 1.26.9, 1.27.0-0 to before 1.27.2
Go standard library

internal/syscall/windows · 0 to before 1.26.9, 1.27.0-0 to before 1.27.2
Go standard library

Component: Not specified by the source
Function: Root.Mkdir, doInRoot, rootMkdirAll, Root.Chmod, Root.Chown, Root.Chtimes, Root.Lchown, Root.Link, Root.MkdirAll, Root.Remove, Root.RemoveAll, Root.Rename, Root.Symlink, Mkdirat

What an attacker can do

The source does not specify what an attacker can achieve.