Medium · 4.7 CVE-2026-123839 EUVD-2026-118342GHSA-9x95-36v2-wjrr

In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Development port forwardin…

Published Nov 6, 2026 · Updated Nov 6, 2026 · Assigned by JetBrains

Description

In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Development port forwarding model

Vendor	Product	Affected	Fixed
JetBrains	IntelliJ IDEA	< 2026.3	2026.3