Code Execution Flaw in JetBrains PyCharm Affects Safe Mode Functionality
CVE-2026-123854

5.5MEDIUM

Key Information:

Vendor

Jetbrains
Status
Pycharm
Vendor
CVE Published:
6 November 2026

What is CVE-2026-123854?

A vulnerability exists in JetBrains PyCharm where it allows code execution in Safe Mode due to a crafted Jupyter notebook widget module. This flaw can potentially compromise the security of user systems by executing arbitrary code, highlighting the importance of ensuring software is kept up to date and secure.

Affected Version(s)

PyCharm 0 < 2026.3

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.