Code Execution Flaw in JetBrains WebStorm Affects Angular CLI Schematics Loader
CVE-2026-123322

6.3MEDIUM

Key Information:

Vendor

Jetbrains
Status
Webstorm
Vendor
CVE Published:
6 November 2026

What is CVE-2026-123322?

A security vulnerability in JetBrains WebStorm prior to version 2026.3 and version 2026.2.4 allows for potential code execution within untrusted projects through the Angular CLI schematics loader. This flaw may permit malicious actors to execute unauthorized code, posing a significant risk to application integrity and security.

Affected Version(s)

WebStorm 0 < 2026.3, 2026.2.4

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.