Vulnerabilities

TI-2026-46332 CVE-2026-64803 · GHSA-7pxx-mh46-9ggr

Code injection in JetBrains GoLand

LOW 35

In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00211 Published 2026-07-23 Fixed in 2026.2 CWE-94

TI-2026-46331 CVE-2026-64802 · GHSA-qc93-vrfp-c4mv

LOW 35

In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00211 Published 2026-07-23 Fixed in 2026.2 CWE-94

TI-2026-46330 CVE-2026-64800 · GHSA-mq5x-hhj4-5pj3

LOW 27

In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00847 Published 2026-07-23 Fixed in 2026.2 CWE-532