Description
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | PhpStorm | < 2026.2 | 2026.2 |
High · 8.4
CVE-2026-64808
EUVD-2026-48233GHSA-m97h-r67f-cx3h
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling
Published Jul 23, 2026 · Updated Jul 24, 2026 · Assigned by JetBrains