Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-49366

In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion

Description

In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

JetBrains IntelliJ IDEA

Default version status: unaffected

  • 0 to < 2026.1.1affected

References