Security Vulnerabilities
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers
CVSS Score
7.0
EPSS Score
0.001
Published
2026-11-06
In JetBrains IntelliJ IDEA before 2026.3,
2026.2.1 command injection was possible in untrusted projects via Tomcat run configurations on WSL
CVSS Score
7.8
EPSS Score
0.005
Published
2026-11-06
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file
CVSS Score
7.8
EPSS Score
0.002
Published
2026-11-06
In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Development port forwarding model
CVSS Score
4.7
EPSS Score
0.003
Published
2026-11-06
In JetBrains IntelliJ IDEA before 2026.3 hTML injection was possible in Remote Development editor tabs
CVSS Score
4.7
EPSS Score
0.002
Published
2026-11-06
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via symlinks in an imported settings archive
CVSS Score
7.8
EPSS Score
0.002
Published
2026-11-06
In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives
CVSS Score
7.1
EPSS Score
0.002
Published
2026-11-06
In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration
CVSS Score
3.3
EPSS Score
0.001
Published
2026-11-06
In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projects
CVSS Score
3.6
EPSS Score
0.001
Published
2026-11-06
In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's service account
CVSS Score
7.5
EPSS Score
0.003
Published
2026-11-06