Code Execution Vulnerability in JetBrains IntelliJ IDEA Affected by Terraform File Watchers
CVE-2026-123849

7HIGH

Key Information:

Vendor

Jetbrains
Status
Intellij Idea
Vendor
CVE Published:
6 November 2026

What is CVE-2026-123849?

A code execution vulnerability exists in JetBrains IntelliJ IDEA prior to version 2026.3, stemming from the handling of Terraform File Watchers. This flaw allows untrusted projects to execute arbitrary code, potentially compromising the integrity of the development environment. Users are advised to update to the latest version to mitigate this risk and enhance their security posture.

Affected Version(s)

IntelliJ IDEA 0 < 2026.3

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.