XML External Entity Attack Vulnerability in JetBrains IntelliJ IDEA
CVE-2026-123314

3.1LOW

Key Information:

Vendor

Jetbrains
Status
Intellij Idea
Vendor
CVE Published:
6 November 2026

What is CVE-2026-123314?

A vulnerability exists in JetBrains IntelliJ IDEA that allows for XML External Entity (XXE) attacks through malformed XML responses in HTTP Client requests. This issue can lead to data exposure, potential denial of service, and security breaches, making it crucial for users to apply the latest updates to protect their systems.

Affected Version(s)

IntelliJ IDEA 0 < 2026.3, 2026.2.4

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.