Google Guest Agent Vulnerability in Go Cryptography

Google Guest Agent Vulnerability in Go Cryptography

First seen 2 Dec 2025, 18:33 UTC Ubuntu 10.3

Article Content

Browse articles
ThreatCluster

A vulnerability in the Go Cryptography module used in Google Guest Agent was discovered by Damien Tournoud, Patrick Dawkins, Vince Parker, and Jules Duvivier. The flaw involves improper handling of public keys during SSH operations, potentially allowing attackers to bypass authorization mechanisms. This issue was addressed in a subsequent update, USN-7839-2.