CVE-2026-53915
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration.
Risk Assessment
An attacker can exploit this vulnerability to gain control over the victim's system, leading to data theft, malware installation, or further attacks on infrastructure.
Recommendation
It is recommended to immediately update JetBrains GoLand to version 2026.1.3 or later and avoid opening projects from untrusted sources.
Other vulnerabilities in JetBrains GoLand
See all- CVE-2026-64803High
In JetBrains GoLand before 2026.2, arbitrary code execution was possible before granting project trust via the configured Go SDK.
- CVE-2026-64802High
In JetBrains GoLand before 2026.2, arbitrary code execution was possible before granting project trust in the Go Modules integration.
- CVE-2026-64800Low
In JetBrains GoLand before 2026.2 sensitive configuration values are written to log files by default.
Original NVD description (English source)
In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration