JetBrains IntelliJ IDEA flaws allow code execution and unauthorized connections
Opening an untrusted project in IntelliJ IDEA could let attackers hack your PC.
Summary
JetBrains IntelliJ IDEA versions before 2026.3 and 2026.2.4 have several flaws. Opening an untrusted project can run code, and the built-in web server and Markdown preview can be abused.
Affected when
- Opening untrusted projects
What to do
Update to 2026.3 or 2026.2.4 or later.
Update to at least the version for your product:
- JetBrains IntelliJ IDEA 2026.3 2026.3 or later
- JetBrains IntelliJ IDEA 2026.2 2026.2.4 or later
Products and platforms
CVE IDs
Times
First published
First seen