PT-2026-36089 · Jetbrains · Intellij Idea

Published 2026-04-30 · Updated 2026-04-30 · CVE-2026-41882

NVD

CVSS v3.1

7.4

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 reading arbitrary local files was possible via built-in web server

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2026-41882

Affected Products

Intellij Idea

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-41882 · Security Note
• https://jetbrains.com/privacy-security/issues-fixed · Note