Arbitrary code execution in JetBrains GoLand Go Modules integration (CVE-2026-64802)

JetBrains GoLand before version 2026.2 is vulnerable to arbitrary code execution via the Go Modules integration. The vulnerability can be triggered before a user grants project trust, meaning malicious code could execute when opening an untrusted project without any explicit user consent. Affected versions: - before 2026.2 We recommend updating to: 2026.2. CVSS 7.8 · our assessment: this_week Reference: https://www.jetbrains.com/privacy-security/issues-fixed/ Details: https://vuln.today/cve/CVE-2026-64802