PT-2026-44962 · Jetbrains · Copyright Plugin+1

CVE-2026-49382 · Published 2026-05-29 · Updated 2026-06-01

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2026.1

Description Code execution is possible through template injection within the Copyright plugin. Template injection occurs when untrusted input is embedded into a template and executed by the engine, allowing an attacker to run arbitrary code.

Recommendations Update to version 2026.1 or later. As a temporary workaround, consider disabling the Copyright plugin to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-1336

Related Identifiers

CVE-2026-49382

Affected Products

Copyright Plugin

Intellij Idea

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/49xxx/CVE-2026-49382.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-49382 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-49382 · Security Note
• https://jetbrains.com/privacy-security/issues-fixed · Vendor Advisory
• https://twitter.com/CVEnew/status/2060470670044131372 · Twitter Post
• https://t.me/cveNotify/165460 · Telegram Post