Command Execution Flaw in JetBrains IntelliJ IDEA
CVE-2026-123311

5.3MEDIUM

Key Information:

Vendor

Jetbrains
Status
Intellij Idea
Vendor
CVE Published:
6 November 2026

What is CVE-2026-123311?

A command execution vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2026.3 and specifically in 2026.2.4, where an attacker could exploit a hidden run control in the Markdown preview feature. This flaw could allow unauthorized command execution, posing security risks to users. It is crucial for developers and organizations using affected versions to apply security updates promptly to mitigate potential threats.

Affected Version(s)

IntelliJ IDEA 0 < 2026.3, 2026.2.4

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.