High WID-SEC-2026-1751 4 CVEs

JetBrains IntelliJ IDEA: Mehrere Schwachstellen

Published May 31, 2026 · Updated May 31, 2026 · de-DE

Vendor: JetBrains Product: IntelliJ IDEA Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in JetBrains IntelliJ IDEA ausnutzen, um beliebigen Programmcode auszuführen und um Informationen offenzulegen.

Product

IntelliJ IDEA ist eine Java Entwicklungsumgebung (IDE).

Vulnerabilities 4

High 8.0

CVE-2026-49367

In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account

JetBrains IntelliJ IDEA

May 29, 2026
High 7.8

CVE-2026-49366

In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion

JetBrains IntelliJ IDEA

May 29, 2026
Medium 4.5

CVE-2026-49382

In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin

JetBrains IntelliJ IDEA

May 29, 2026
Low 3.3

CVE-2026-49383

In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible

JetBrains IntelliJ IDEA

May 29, 2026

Revision history

2026-05-31 #1
Initiale Fassung

References

National Vulnerability Database CVE-2026-49366 vom 2026-05-31
https://nvd.nist.gov/vuln/detail/CVE-2026-49366
National Vulnerability Database CVE-2026-49367 vom 2026-05-31
https://nvd.nist.gov/vuln/detail/CVE-2026-49367
National Vulnerability Database CVE-2026-49382 vom 2026-05-31
https://nvd.nist.gov/vuln/detail/CVE-2026-49382
National Vulnerability Database CVE-2026-49383 vom 2026-05-31
https://nvd.nist.gov/vuln/detail/CVE-2026-49383
JetBrains Fixed security issues vom 2026-05-31
https://www.jetbrains.com/privacy-security/issues-fixed/