Code Execution Vulnerability in JetBrains WebStorm
CVE-2026-123321

7.8HIGH

Key Information:

Vendor

Jetbrains
Status
Webstorm
Vendor
CVE Published:
6 November 2026

What is CVE-2026-123321?

A vulnerability in JetBrains WebStorm allows for potential code execution in untrusted projects due to unsafe task loading via Grunt and Gulp. Users who utilize these features in versions prior to 2026.3 may be at risk, prompting the need for careful examination and timely updates to safeguard against unauthorized commands executed in their development environment.

Affected Version(s)

WebStorm 0 < 2026.3, 2026.2.3

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.