Medium · 5.3 CVE-2026-123311 EUVD-2026-118075GHSA-3vff-55hr-vh4w

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 command execution via a hidden run control in the Markdown preview was possible

Published Nov 6, 2026 · Updated Nov 7, 2026 · Assigned by JetBrains

Description

In JetBrains IntelliJ IDEA before 2026.3,
2026.2.4 command execution via a hidden run control in the Markdown preview was possible

Vendor	Product	Affected	Fixed
JetBrains	IntelliJ IDEA	< 2026.3, 2026.2.4	2026.3, 2026.2.4