CVE-2026-64800 is an information exposure vulnerability in JetBrains GoLand where sensitive configuration data is logged by default in versions prior to 2026.2. This behavior can lead to unintended disclosure of sensitive information through log files. The vulnerability is identified as CWE-532. No official fix or patch has been announced, and the vendor has not provided specific remediation guidance. The CVSS 3.1 base score is 3.5, reflecting low impact primarily on confidentiality with no impact on integrity or availability.

Sensitive configuration values may be exposed in log files, potentially allowing unauthorized users with access to these logs to view confidential information. The impact is limited to confidentiality with no direct effect on system integrity or availability. The vulnerability requires low attack complexity and privileges but user interaction is required.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to log files to trusted personnel only and review logging configurations to avoid logging sensitive data. Monitor JetBrains advisories for updates regarding patches or official mitigations.