In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, 2025.3.6.2 code execution was possible in untrusted projects via script engine discove

JetBrains IntelliJ IDEA2026-11-06 10:27 UTC1 min readRead in

Summary

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, 2025.3.6.2 code execution was possible in untrusted projects via script engine discovery

Remediation

Inventory every JetBrains IntelliJ IDEA deployment, including staging.
No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

Referencehttps://www.jetbrains.com/privacy-security/issues-fixed/