The gopls language server by default communicates via pipe, but supports -port and -listen flags for debugging. If these flags are used with values that cause gopls to listen on 0.0.0.0, it may inadvertently expose the service to the network. This exposure can allow a malicious actor on the same network to execute arbitrary code via gopls.