Remote Project Access Vulnerability in JetBrains IntelliJ IDEA
CVE-2025-68269

5.4MEDIUM

Key Information:

Vendor

Jetbrains
Status
Intellij Idea
Vendor
CVE Published:
16 December 2025

What is CVE-2025-68269?

A security issue in JetBrains IntelliJ IDEA prior to version 2025.3 allows users to open untrusted remote projects over SSH without confirmation. This may expose users to unforeseen risks, including potential data breaches and malicious code execution. It is crucial for users to update to the latest version to mitigate this vulnerability. For detailed information, please refer to the security updates provided by JetBrains.

Affected Version(s)

IntelliJ IDEA 0 < 2025.3

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-68269 : Remote Project Access Vulnerability in JetBrains IntelliJ IDEA