Database Connection Vulnerability in JetBrains IntelliJ IDEA Affects Untrusted Projects
CVE-2026-123833

3.6LOW

Key Information:

Vendor

Jetbrains
Status
Intellij Idea
Vendor
CVE Published:
6 November 2026

What is CVE-2026-123833?

In JetBrains IntelliJ IDEA versions prior to 2026.3, a vulnerability exists that allows unauthorized database connections to be established within untrusted projects. This could potentially lead to exposure of sensitive data or compromise of the database due to inadequate validation of input parameters within the environment. Users are urged to update their software to mitigate risks associated with this security flaw.

Affected Version(s)

IntelliJ IDEA 0 < 2026.3

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
3.6
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.