GoLand Pprof Profiler Auth Bypass before 2026.2.2.1
CVE-2026-86506 Published on September 7, 2026
In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed profiling data
Vulnerability Analysis
CVE-2026-86506 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.
Weakness Type
Missing Authentication for Critical Function
The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Products Associated with CVE-2026-86506
Want to know whenever a new CVE is published for JetBrains Goland? stack.watch will email you.
Affected Versions
JetBrains GoLand:- Before 2026.2.2.1 is affected.