Server-Side Request Forgery in JetBrains IntelliJ IDEA Affects Untrusted Projects
CVE-2026-75054

6.3MEDIUM

Key Information:

Vendor

Jetbrains
Status
Intellij Idea
Vendor
CVE Published:
17 August 2026

What is CVE-2026-75054?

A Server-Side Request Forgery (sSRF) vulnerability has been identified in JetBrains IntelliJ IDEA prior to version 2026.2.1. This vulnerability allows attackers to exploit the OpenAPI preview proxy feature in untrusted projects, potentially leading to unauthorized access and manipulation of server resources. Users are urged to update to the latest version to mitigate this risk.

Affected Version(s)

IntelliJ IDEA 0 < 2026.2.1

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.