High · 7.8 CVE-2026-100256 EUVD-2026-90000GHSA-x2cm-2gq8-g82v

In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projects

Published Sep 30, 2026 · Updated Oct 1, 2026 · Assigned by JetBrains

Vendor: JetBrains Product: IntelliJ IDEA

Description

In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projects

Affected products

Vendor	Product	Affected	Fixed
JetBrains	IntelliJ IDEA	< 2026.2.3	2026.2.3

Advisories 1

WID-SEC-2026-3679 JetBrains IntelliJ IDEA: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Sep 30, 2026

References

https://www.jetbrains.com/privacy-security/issues-fixed/