High · 7.4 CVE-2026-123306 EUVD-2026-118070GHSA-cw4c-cqjm-g5cw

In JetBrains IntelliJ IDEA before 2026.3 improper checks allowed server certificates to be added to the trust store during headless runs

Published Nov 6, 2026 · Updated Nov 7, 2026 · Assigned by JetBrains

Vendor: JetBrains Product: IntelliJ IDEA

Description

In JetBrains IntelliJ IDEA before 2026.3 improper checks allowed server certificates to be added to the trust store during headless runs

Affected products

Vendor	Product	Affected	Fixed
JetBrains	IntelliJ IDEA	< 2026.3	2026.3

Advisories 1

WID-SEC-2026-4379 JetBrains IntelliJ IDEA: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 8, 2026

References

https://www.jetbrains.com/privacy-security/issues-fixed/