Description
In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | GoLand | < 2026.2 | 2026.2 |
High · 7.8
CVE-2026-64803
EUVD-2026-48228GHSA-7pxx-mh46-9ggr
In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK
Published Jul 23, 2026 · Updated Jul 24, 2026 · Assigned by JetBrains