CVE-2026-53915
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration.
Risk Assessment
An attacker can exploit this vulnerability to gain control over the victim's system, leading to data theft, malware installation, or further attacks on infrastructure.
Recommendation
It is recommended to immediately update JetBrains GoLand to version 2026.1.3 or later and avoid opening projects from untrusted sources.
Other vulnerabilities in JetBrains GoLand
See all- CVE-2026-86506Medium
In JetBrains GoLand before 2026.2.2.1, missing authentication on the GoLand profiler's injected pprof server exposed profiling data.
- CVE-2026-64803High
In JetBrains GoLand before 2026.2, arbitrary code execution was possible before granting project trust via the configured Go SDK.
- CVE-2026-64802High
In JetBrains GoLand before 2026.2, arbitrary code execution was possible before granting project trust in the Go Modules integration.
- CVE-2026-64800Low
In JetBrains GoLand before 2026.2 sensitive configuration values are written to log files by default.
Original NVD description (English source)
In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration
Vulnerability data from NVD (NIST) · CISA KEV · EPSS