Untrusted Project Configuration Issue in JetBrains IntelliJ IDEA
CVE-2026-123843

3.3LOW

Key Information:

Vendor

Jetbrains
Status
Intellij Idea
Vendor
CVE Published:
6 November 2026

What is CVE-2026-123843?

In JetBrains IntelliJ IDEA versions prior to 2026.3, an issue exists where untrusted projects can manipulate GPG agent settings without proper authorization. This vulnerability can lead to unintended changes in the GPG agent configuration, potentially compromising the security setup of the user's development environment. Developers and organizations using IntelliJ IDEA should be aware of this issue and apply the latest updates to safeguard against such configuration risks.

Affected Version(s)

IntelliJ IDEA 0 < 2026.3

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.