Description
In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | GoLand | < 2026.2 | 2026.2 |
High · 7.8
CVE-2026-64802
EUVD-2026-48227GHSA-qc93-vrfp-c4mv
In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration
Published Jul 23, 2026 · Updated Jul 24, 2026 · Assigned by JetBrains