Path Traversal Vulnerability in JetBrains IntelliJ IDEA
CVE-2026-123305

7.5HIGH

Key Information:

Vendor

Jetbrains
Status
Intellij Idea
Vendor
CVE Published:
6 November 2026

What is CVE-2026-123305?

A path traversal vulnerability exists in JetBrains IntelliJ IDEA prior to version 2026.3, allowing attackers to exploit this flaw by unpacking Dev Container archives sourced from remote hosts. This could lead to unauthorized access to the file system, potentially exposing sensitive data. Users are advised to update to the latest version to mitigate this risk.

Affected Version(s)

IntelliJ IDEA 0 < 2026.3

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.