Arbitrary Code Execution Vulnerability in JetBrains PyCharm
CVE-2026-65908

8.6HIGH

Key Information:

Vendor

Jetbrains
Status
Pycharm
Vendor
CVE Published:
23 July 2026

What is CVE-2026-65908?

JetBrains PyCharm prior to version 2026.1.4 and 2026.2 is susceptible to an arbitrary code execution vulnerability. This flaw allows attackers to execute malicious Python code by leveraging untrusted projects, which poses a significant security risk for users who open such projects without adequate precautions. Attackers can exploit this vulnerability to gain unauthorized access and execute harmful actions within the development environment.

Affected Version(s)

PyCharm 0 < 2026.1.4, 2026.2

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.