JetBrains IntelliJ IDEA vulnerabilities

CVEs per yearBy the year they were published

1. 20181
2. 202219
3. 20237
4. 20244
5. 20256
6. 202657

Newest CVEs

• CVE-2026-123853

  In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM options of the build process

  JetBrains · IntelliJ IDEA

  High7.8
• CVE-2026-123849

  In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers

  JetBrains · IntelliJ IDEA

  High7.0
• CVE-2026-123848

  In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates

  JetBrains · IntelliJ IDEA

  High7.4
• CVE-2026-123847

  In JetBrains IntelliJ IDEA before 2026.3 command execution was possible via control characters in terminal command completion

  JetBrains · IntelliJ IDEA

  Medium5.3
• CVE-2026-123846

  In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation

  JetBrains · IntelliJ IDEA

  Medium4.3
• CVE-2026-123845

  In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects

  JetBrains · IntelliJ IDEA

  Low3.3
• CVE-2026-123844

  In JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositories

  JetBrains · IntelliJ IDEA

  Medium5.3
• CVE-2026-123843

  In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration

  JetBrains · IntelliJ IDEA

  Low3.3
• CVE-2026-123842

  In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives

  JetBrains · IntelliJ IDEA

  High7.1
• CVE-2026-123841

  In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via symlinks in an imported settings archive

  JetBrains · IntelliJ IDEA

  High7.8