Code Execution Vulnerability in JetBrains PyCharm Affects Unauthenticated Jupyter Tools
CVE-2026-75060

8.4HIGH

Key Information:

Vendor

Jetbrains
Status
Pycharm
Vendor
CVE Published:
17 August 2026

What is CVE-2026-75060?

A vulnerability in JetBrains PyCharm allows for code execution through unauthenticated access to Jupyter MCP tools prior to version 2026.2.1. This flaw can potentially lead to unauthorized actions within the affected environment, emphasizing the importance of timely updates to secure developer tools.

Affected Version(s)

PyCharm 0 < 2026.2.1

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.