Description
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | PhpStorm | < 2026.2 | 2026.2 |
High · 8.4
CVE-2026-64809
EUVD-2026-48234GHSA-3x85-78v7-w543
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter
Published Jul 23, 2026 · Updated Jul 24, 2026 · Assigned by JetBrains