Skip to contentJetbrains Intellij Idea vulnerabilities
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via...CVE-2026-1238497.0 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS...CVE-2026-1238487.4 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3 command execution was possible via control characters in...CVE-2026-1238475.3 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON...CVE-2026-1238464.3 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references...CVE-2026-1238453.3 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositoriesCVE-2026-1238445.3 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent...CVE-2026-1238433.3 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when...CVE-2026-1238427.1 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3 code execution was possible via symlinks in an imported...CVE-2026-1238417.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3 hTML injection was possible in Remote Development editor...CVE-2026-1238404.7 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible...CVE-2026-1238394.7 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer...CVE-2026-1238387.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3,
2026.2.1 command injection was possible in untrusted...CVE-2026-1238377.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted...CVE-2026-1238333.6 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3,
2026.2.4 xXE attack was possible via an XML response...CVE-2026-1233143.1 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3 improper checks could enable disabled plugins via...CVE-2026-1233133.3 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3,
2026.2.4 sSRF was possible via annotations.xml files...CVE-2026-1233123.3 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3,
2026.2.4 command execution via a hidden run control in...CVE-2026-1233115.3 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3 kotlin scripts could trigger dependency downloads from...CVE-2026-1233105.4 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3,
2026.2.4 stored XSS was possible on the built-in web...CVE-2026-1233096.1 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in...CVE-2026-1233086.3 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3,
2026.2.4 unauthenticated connection to an arbitrary...CVE-2026-1233076.8 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3 improper checks allowed server certificates to be added...CVE-2026-1233067.4 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via unpacking Dev Container...CVE-2026-1233057.5 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured...CVE-2026-1233047.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3,
2026.2.4,
2026.1.5.1,
2025.3.6.2 code execution was...CVE-2026-1233027.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3 dOM-based XSS in the OpenAPI preview error view was...CVE-2026-1233018.2 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3,
2026.2.4 code execution was possible in untrusted...CVE-2026-1232937.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC...CVE-2026-1232786.7 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was...CVE-2026-1002567.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to...CVE-2026-865053.3 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a...CVE-2026-865047.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via...CVE-2026-865033.3 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC...CVE-2026-865028.4 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.logCVE-2026-865012.8 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importersCVE-2026-750585.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE logCVE-2026-750576.2 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possibleCVE-2026-750567.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXECVE-2026-750555.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in...CVE-2026-750546.3 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpointCVE-2026-750535.4 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content...CVE-2026-750523.6 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer...CVE-2026-648158.1 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote...CVE-2026-648148.6 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a...CVE-2026-6481310.0 Critical
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote...CVE-2026-6481210.0 Critical
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting...CVE-2026-648117.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification,...CVE-2026-648104.3 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.1.4,
2026.2 code execution via path traversal in project...CVE-2026-597929.6 Critical
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possibleCVE-2026-493833.3 Low
- Show olderLoading…