Remote Development Port Forwarding in JetBrains IntelliJ IDEA Exposes Users to Arbitrary URLs
CVE-2026-123839

4.7MEDIUM

Key Information:

Vendor

Jetbrains
Status
Intellij Idea
Vendor
CVE Published:
6 November 2026

What is CVE-2026-123839?

A security flaw in JetBrains IntelliJ IDEA versions before 2026.3 allows users to open arbitrary URLs without confirmation when using the Remote Development port forwarding model. This oversight exposes users to potential risks, as malicious URLs could be accessed inadvertently, leading to various security threats.

Affected Version(s)

IntelliJ IDEA 0 < 2026.3

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.