Code Execution Vulnerability in JetBrains IntelliJ IDEA
CVE-2026-123838

7.8HIGH

Key Information:

Vendor

Jetbrains
Status
Intellij Idea
Vendor
CVE Published:
6 November 2026

What is CVE-2026-123838?

A vulnerability in JetBrains IntelliJ IDEA allows for code execution in Safe Mode through manipulation of UI Designer form files. This could potentially enable attackers to execute arbitrary code if they gain access to a vulnerable instance of the software. Users are encouraged to update their versions of IntelliJ IDEA to secure their development environments against such exploits.

Affected Version(s)

IntelliJ IDEA 0 < 2026.3

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.