CVE-2026-64803: JetBrains Goland

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK

Affected products

• JetBrains Goland: before 2026.2 (fixed in 2026.2)

Published 2026-07-23. Last modified 2026-07-28.