HTML Injection Vulnerability in JetBrains IntelliJ IDEA Affects User Privacy
CVE-2026-64810

4.3MEDIUM

Key Information:

Vendor

Jetbrains
Status
Intellij Idea
Vendor
CVE Published:
23 July 2026

What is CVE-2026-64810?

In JetBrains IntelliJ IDEA prior to version 2026.2, an HTML injection vulnerability was identified within IDE notifications. This weakness could potentially allow malicious actors to track user activities without their consent, raising significant privacy concerns for end-users.

Affected Version(s)

IntelliJ IDEA 0 < 2026.2

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.