Jetbrains: >> Intellij Idea Security Vulnerabilities
In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container configuration
CVSS Score
7.8
EPSS Score
0.001
Published
2026-07-23
In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session
CVSS Score
10.0
EPSS Score
0.005
Published
2026-07-23
In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session
CVSS Score
10.0
EPSS Score
0.005
Published
2026-07-23
In JetBrains IntelliJ IDEA before 2026.1.4,
2026.2 code execution via path traversal in project workspace ID handling was possible
CVSS Score
9.6
EPSS Score
0.006
Published
2026-07-10
In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin
CVSS Score
4.5
EPSS Score
0.001
Published
2026-05-29
In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible
CVSS Score
3.3
EPSS Score
0.001
Published
2026-05-29
In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion
CVSS Score
7.8
EPSS Score
0.005
Published
2026-05-29
In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account
CVSS Score
8.0
EPSS Score
0.003
Published
2026-05-29
In JetBrains IntelliJ IDEA before 2024.3.7.1,
2025.1.7.1,
2025.2.6.2,
2025.3.4.1,
2026.1.1 reading arbitrary local files was possible via built-in web server
CVSS Score
7.4
EPSS Score
0.004
Published
2026-04-30
In JetBrains IntelliJ IDEA before 2025.3 missing confirmation allowed opening of untrusted remote projects over SSH
CVSS Score
5.4
EPSS Score
0.001
Published
2025-12-16