PT-2025-51720 · Jetbrains · Intellij Idea

Published 2025-12-16 · Updated 2025-12-16 · CVE-2025-68269

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2025.3

Description A missing confirmation step allowed the opening of untrusted remote projects over SSH. This could potentially lead to the execution of malicious code or unauthorized access to resources.

Recommendations Update to version 2025.3 or later.

Fix

Weakness Enumeration

CWE-349

Related Identifiers

CVE-2025-68269

Affected Products

Intellij Idea

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-68269 · Security Note
• https://jetbrains.com/privacy-security/issues-fixed · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-68269 · Vendor Advisory
• https://twitter.com/CVEnew/status/2000986407142351270 · Twitter Post
• https://t.me/CVEtracker/39967 · Telegram Post