Arbitrary Code Execution in JetBrains GoLand Affects Developers
CVE-2026-64803

7.8HIGH

Key Information:

Vendor

Jetbrains
Status
Goland
Vendor
CVE Published:
23 July 2026

What is CVE-2026-64803?

A vulnerability in JetBrains GoLand prior to version 2026.2 allows for the execution of arbitrary code before project trust is established through the configured Go SDK. This vulnerability poses risks for users by permitting unauthorized code execution without appropriate project verification.

Affected Version(s)

GoLand 0 < 2026.2

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.