PatchTheCVEintellij idea vulnerabilities and fixes
Recent CVEs affecting intellij idea, with upgrade or downgrade steps. 13 tracked.
Also searched as: intellijidea.
intellij idea has 13 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 13. Most recent: 2026-08-17. Highest priority: CVE-2026-64813 (score 54/100).
- CVE-2026-64813 CRITICAL 10.0 UPGRADE In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Developme
- CVE-2026-64812 CRITICAL 10.0 UPGRADE In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development ses
- CVE-2026-64815 HIGH 8.1 UPGRADE In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files
- CVE-2026-64814 HIGH 8.6 UPGRADE In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session
- CVE-2026-64811 HIGH 7.8 UPGRADE In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust v
- CVE-2026-64810 MEDIUM 4.3 UPGRADE In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent u
- CVE-2026-75056 HIGH 7.8 UPGRADE In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible
- CVE-2026-75054 MEDIUM 6.3 UPGRADE In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projec
- CVE-2026-75057 MEDIUM 6.2 UPGRADE In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log
- CVE-2026-75053 MEDIUM 5.4 UPGRADE In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint
- CVE-2026-75055 MEDIUM 5.5 UPGRADE In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE
- CVE-2026-75058 MEDIUM 5.5 UPGRADE In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers
- CVE-2026-75052 LOW 3.6 UPGRADE In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible
FAQ
How do I fix intellij idea vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is intellij idea being exploited right now?
None of the tracked intellij idea CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which intellij idea CVE should I patch first?
CVE-2026-64813 currently ranks highest (54/100): In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Developme.