Critical · 9.6 CVE-2026-59792 EUVD-2026-42910GHSA-6f7v-4c46-hrp4

In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible

Published Jul 10, 2026 · Updated Jul 14, 2026 · Assigned by JetBrains

Description

In JetBrains IntelliJ IDEA before 2026.1.4,
2026.2 code execution via path traversal in project workspace ID handling was possible

Vendor	Product	Affected	Fixed
JetBrains	IntelliJ IDEA	< 2026.1.4, 2026.2	2026.1.4, 2026.2

CNA	v3.1	9.6
EUVD	v3.1	9.6