CVE-2026-64807PATCHED

jetbrains · webstorm

CVE-2026-64807: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration

Description

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration

Affected Products

Vendor	Product	Versions
jetbrains	webstorm	0

Also Affects

Downstream vendors/products affected by this vulnerability

Vendor	Product	Source	Confidence
jetbrains	webstorm	cert_advisory	90%

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Related News (2 articles)

Tier B

BSI Advisories7d ago

[NEU] [hoch] JetBrains WebStorm: Mehrere Schwachstellen ermöglichen Codeausführung

→ No new info (linked only)

Tier C

VulDB8d ago

CVE-2026-64807 | JetBrains WebStorm up to 2026.1 Linter Configuration code injection

→ No new info (linked only)

CVSS 3.17.8 HIGH

VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA KEV❌ No

Actively exploited❌ No

Patch available

2026.2

CWECWE-829

PublishedJul 23, 2026

Trending Score17

Source articles2

Independent2

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

CRITICALCVE-2026-63077

CVE-2026-63077: In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent pollin

Trending: 79

CRITICALCVE-2026-64812

CVE-2026-64812: In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session

Trending: 24

CRITICALCVE-2026-64813

CVE-2026-64813: In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session

Trending: 24

HIGHCVE-2026-64814

CVE-2026-64814: In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session

Trending: 20

CRITICALCVE-2026-65907

CVE-2026-65907: In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible

Trending: 19

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Jul 23, 2026

Discovered by ZDM

Jul 23, 2026

Patch Available

Jul 24, 2026