Input Command Exposure in JetBrains IntelliJ IDEA
CVE-2026-86501

2.8LOW

Key Information:

Vendor

Jetbrains
Status
Intellij Idea
Vendor
CVE Published:
7 September 2026

What is CVE-2026-86501?

A security flaw in JetBrains IntelliJ IDEA versions prior to 2026.2.2 enables terminal command inputs to be inadvertently logged in the idea.log file. This logging can potentially expose sensitive user commands and data, creating a risk for users who may unknowingly reveal confidential information through their command line interactions. Users are encouraged to update to the latest version to mitigate this risk.

Affected Version(s)

IntelliJ IDEA 0 < 2026.2.2

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
2.8
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.