Vulnerability in JetBrains IntelliJ IDEA Allows Unintended Plugin Startup
CVE-2025-57729

6.5MEDIUM

Key Information:

Vendor

Jetbrains
Status
Intellij Idea
Vendor
CVE Published:
20 August 2025

What is CVE-2025-57729?

In JetBrains IntelliJ IDEA versions prior to 2025.2, a vulnerability was identified that allows for an unexpected startup of plugins through the automatic launching of the Language Server Protocol (LSP). This could potentially enable malicious actors to exploit the environment by executing unauthorized code, compromising user security and the integrity of the development environment.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

IntelliJ IDEA 0 < 2025.2

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.