CVE-2026-25889: Go Case Sensitivity Map Bypass

A map lookup is used to check if a provided field is sensitive. Missing case-normalization can allow an attacker to bypass this validation by supplying a differently cased string.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Go
greprules fetch cve-2026-25889-go-case-sensitivity-map-bypass --engine opengrep

Description

A map lookup is used to check if a provided field is sensitive. Missing case-normalization can allow an attacker to bypass this validation by supplying a differently cased string.