Medium · 6.7 CVE-2026-123278 EUVD-2026-118043GHSA-cwq7-7vmm-78gg

In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpoint

Published Nov 6, 2026 · Updated Nov 7, 2026 · Assigned by JetBrains

Vendor: JetBrains Product: IntelliJ IDEA

Description

In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpoint

Affected products

Vendor	Product	Affected	Fixed
JetBrains	IntelliJ IDEA	< 2026.3	2026.3

Advisories 1

WID-SEC-2026-4379 JetBrains IntelliJ IDEA: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 8, 2026

References

https://www.jetbrains.com/privacy-security/issues-fixed/