CVE-2026-59792

CriticalCVSS 9.6

Published: 10/07/2026(UTC)Updated: 14/07/2026(UTC)Translated: 15/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

34th percentile - higher than 34% of all known CVEs

Summary

In JetBrains IntelliJ IDEA before 2026.1.4 and 2026.2, a vulnerability allowed code execution via path traversal in project workspace ID handling.

Risk Assessment

An attacker can remotely execute arbitrary code on the developer workstation, leading to full compromise of the development environment and potential leakage of sensitive data.

Recommendation

Immediately update IntelliJ IDEA to version 2026.1.4 or later. If using version 2026.2, apply the appropriate security patch.

Original NVD description (English source)

In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible