High WID-SEC-2026-3225 5 CVEs

JetBrains IntelliJ IDEA: Mehrere Schwachstellen

Published Sep 7, 2026 · Updated Sep 7, 2026 · de-DE

Vendor: JetBrains Product: IntelliJ IDEA Platform: Linux Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in JetBrains IntelliJ IDEA ausnutzen, um Informationen offenzulegen oder Code zur Ausführung zu bringen.

Product

IntelliJ IDEA ist eine Java Entwicklungsumgebung (IDE).

Vulnerabilities 5

High 8.4

CVE-2026-86502

In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code e…

JetBrains IntelliJ IDEA

Sep 7, 2026
High 7.8

CVE-2026-86504

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed h…

JetBrains IntelliJ IDEA

Sep 7, 2026
Low 3.3

CVE-2026-86503

In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source U…

JetBrains IntelliJ IDEA

Sep 7, 2026
Low 3.3

CVE-2026-86505

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace

JetBrains IntelliJ IDEA

Sep 7, 2026
Low 2.8

CVE-2026-86501

In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log

JetBrains IntelliJ IDEA

Sep 7, 2026

Revision history

2026-09-07 #1
Initiale Fassung

References

JetBrains Fixed security issues vom 2026-09-07
https://www.jetbrains.com/privacy-security/issues-fixed/
EU Vulnerability Database vom 2026-09-07
https://euvd.enisa.europa.eu/enisa/EUVD-2026-72517
EU Vulnerability Database vom 2026-09-07
https://euvd.enisa.europa.eu/enisa/EUVD-2026-72518
EU Vulnerability Database vom 2026-09-07
https://euvd.enisa.europa.eu/enisa/EUVD-2026-72519
EU Vulnerability Database vom 2026-09-07
https://euvd.enisa.europa.eu/enisa/EUVD-2026-72520
EU Vulnerability Database vom 2026-09-07
https://euvd.enisa.europa.eu/enisa/EUVD-2026-72521