JetBrains IntelliJ IDEA vulnerabilities and fixes
Exploited and high-severity JetBrains IntelliJ IDEA vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 7.8CVE-2026-123304In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck pathFix availableJetBrains IntelliJ IDEA
1 min read - 7.5CVE-2026-123305In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via unpacking Dev Container archives from a remote hostFix availableJetBrains IntelliJ IDEA
1 min read - 7.4CVE-2026-123306In JetBrains IntelliJ IDEA before 2026.3 improper checks allowed server certificates to be added to the trust store during headless runsFix availableJetBrains IntelliJ IDEA
1 min read - 8.2CVE-2026-123301In JetBrains IntelliJ IDEA before 2026.3 dOM-based XSS in the OpenAPI preview error view was possibleFix availableJetBrains IntelliJ IDEA
1 min read - 7.8CVE-2026-123302In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, 2025.3.6.2 code execution was possible in untrusted projects via script engine discoveVerify fixJetBrains IntelliJ IDEA
1 min read - 7.8CVE-2026-123293In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Terraform tool path settingVerify fixJetBrains IntelliJ IDEA
1 min read - 8.0CVE-2026-118696In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2Fix availableJetBrains IntelliJ IDEA
1 min read