CVE-2026-75060PATCHED

jetbrains · pycharm

CVE-2026-75060: In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools

Description

In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools

Affected Products

Vendor	Product	Versions
jetbrains	pycharm	0

Also Affects

Downstream vendors/products affected by this vulnerability

Vendor	Product	Source	Confidence
jetbrains	pycharm	cert_advisory	90%

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Related News (2 articles)

Tier B

BSI Advisories5d ago

[NEU] [hoch] JetBrains PyCharm: Mehrere Schwachstellen ermöglichen Codeausführung

→ No new info (linked only)

Tier C

VulDB6d ago

CVE-2026-75060 | JetBrains PyCharm up to 2026.2 privileges management

→ No new info (linked only)

CVSS 3.18.4 HIGH

VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA KEV❌ No

Actively exploited❌ No

Patch available

2026.2.1

CWECWE-306

PublishedAug 17, 2026

Trending Score22

Source articles2

Independent2

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-75056

CVE-2026-75056: In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible

Trending: 22

CRITICALCVE-2026-63077EXPKEV

CVE-2026-63077: In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent pollin

Trending: 22

CRITICALCVE-2026-75045

CVE-2026-75045: In JetBrains YouTrack before 2025.3.156085, 2026.1.13913, 2026.2.18112 an unauthenticated attacker could download data

Trending: 21

MEDIUMCVE-2026-75059

CVE-2026-75059: In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible

Trending: 20

MEDIUMCVE-2026-75054

CVE-2026-75054: In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects

Trending: 17

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Aug 17, 2026

Discovered by ZDM

Aug 17, 2026

Patch Available

Aug 18, 2026