CVE-2026-64800
LowCVSS 3.5Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
In JetBrains GoLand before 2026.2 sensitive configuration values are written to log files by default.
Risk Assessment
The risk is leakage of sensitive data such as passwords or API keys into log files, potentially allowing an attacker to access this information.
Recommendation
Update JetBrains GoLand to version 2026.2 or later, and check if sensitive data has already been written to logs.
Other vulnerabilities in JetBrains GoLand
See all- CVE-2026-86506Medium
In JetBrains GoLand before 2026.2.2.1, missing authentication on the GoLand profiler's injected pprof server exposed profiling data.
- CVE-2026-64803High
In JetBrains GoLand before 2026.2, arbitrary code execution was possible before granting project trust via the configured Go SDK.
- CVE-2026-64802High
In JetBrains GoLand before 2026.2, arbitrary code execution was possible before granting project trust in the Go Modules integration.
- CVE-2026-53915High
In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration.
Original NVD description (English source)
In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default
Vulnerability data from NVD (NIST) · CISA KEV · EPSS