Logging Vulnerability in JetBrains IntelliJ IDEA
CVE-2025-32054

Currently unrated

Key Information:

Vendor: JetBrains
Status: IntelliJ IDEA
Vendor: CVE Published:; 3 April 2025

What is CVE-2025-32054?

In JetBrains IntelliJ IDEA versions prior to 2024.3 and 2024.2.4, a vulnerability exists that allows sensitive source code information to be logged in the idea.log file. This could lead to unauthorized access to sensitive data by potentially exposing code and other confidential information. Users should ensure they are using the latest version to mitigate this risk and protect their projects.

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 3, 2025