Arbitrary Code Injection Vulnerability in JetBrains IntelliJ IDEA
CVE-2026-64815

8.1HIGH

Key Information:

Vendor

Jetbrains
Status
Intellij Idea
Vendor
CVE Published:
23 July 2026

What is CVE-2026-64815?

An arbitrary code injection vulnerability has been identified in JetBrains IntelliJ IDEA prior to version 2026.2. This vulnerability allows an attacker to exploit UI Designer form files, potentially leading to the execution of unauthorized code within the development environment. It is crucial for users to update to the latest version to mitigate the risk and protect their systems from this security threat.

Affected Version(s)

IntelliJ IDEA 0 < 2026.2

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.