Skip to content
OpenAdvisories
High · 7.4 CVE-2026-41882 EUVD-2026-26368GHSA-c366-5342-rpxc

In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 reading arbitrary local files was possible via b…

Published Apr 30, 2026 · Updated Apr 30, 2026 · Assigned by JetBrains

Vendor: JetBrains Product: IntelliJ IDEA

Description

In JetBrains IntelliJ IDEA before 2024.3.7.1,
2025.1.7.1,
2025.2.6.2,
2025.3.4.1,
2026.1.1 reading arbitrary local files was possible via built-in web server

Affected products

VendorProductAffectedFixed
JetBrains IntelliJ IDEA < 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1

Advisories 1

References