CVE-2026-64811PATCHED

jetbrains · intellij idea

CVE-2026-64811: In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via develop

Description

In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container configuration

Affected Products

Vendor	Product	Versions
jetbrains	intellij idea	0

Also Affects

Downstream vendors/products affected by this vulnerability

Vendor	Product	Source	Confidence
jetbrains	intellij idea	cert_advisory	90%

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Related News (2 articles)

Tier B

BSI Advisories30d ago

[NEU] [hoch] JetBrains IntelliJ IDEA: Mehrere Schwachstellen

→ No new info (linked only)

Tier C

VulDB31d ago

CVE-2026-64811 | JetBrains IntelliJ IDEA up to 2026.1.4 Development Container Configuration code injection

→ No new info (linked only)

CVSS 3.17.8 HIGH

VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA KEV❌ No

Actively exploited❌ No

Patch available

2026.2

CWECWE-829

PublishedJul 23, 2026

Trending Score2

Source articles2

Independent2

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-75060

CVE-2026-75060: In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools

Trending: 22

HIGHCVE-2026-75056

CVE-2026-75056: In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible

Trending: 22

CRITICALCVE-2026-63077EXPKEV

CVE-2026-63077: In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent pollin

Trending: 22

CRITICALCVE-2026-75045

CVE-2026-75045: In JetBrains YouTrack before 2025.3.156085, 2026.1.13913, 2026.2.18112 an unauthenticated attacker could download data

Trending: 21

MEDIUMCVE-2026-75059

CVE-2026-75059: In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible

Trending: 20

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Jul 23, 2026

Discovered by ZDM

Jul 23, 2026

Patch Available

Jul 24, 2026