Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2026-41882

In JetBrains IntelliJ IDEA before 2024.3.7.1,

Description

In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 reading arbitrary local files was possible via built-in web server

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

JetBrains IntelliJ IDEA

Default version status: unaffected

  • 0 to < 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1affected

References