JetBrains IntelliJ IDEA

6 known vulnerabilities in JetBrains IntelliJ IDEA, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-100256 CVSS 7.8 high In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projects
  • CVE-2026-86505 CVSS 3.3 low In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace
  • CVE-2026-86504 CVSS 7.8 high In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code…
  • CVE-2026-86503 CVSS 3.3 low In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching
  • CVE-2026-86502 CVSS 8.4 high In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote…
  • CVE-2026-86501 CVSS 2.8 low In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log