# Failing Open on Error

- ID: go-failing-open
- Severity: HIGH
- CWE: CWE-636 (CWE-636)
- Languages: Go

## Description

Security validation returns true/grants access when an error occurs.

## Remediation

Return false or deny access when validation errors occur (fail closed).

```go
func validateToken(token string) bool {
    valid, err := checkToken(token)
    if err != nil {
        return false // Deny on error
    }
    return valid
}
```

Learn more: https://shoulder.dev/learn/go/cwe-636/failing-open

## Related Rules

- **Failing Open on Security Check Errors** [CRITICAL]: