CVE Catalog
CVE-2026-64812
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk0.36%
29th percentile - higher than 29% of all known CVEs
Summary
In JetBrains IntelliJ IDEA before version 2026.2, unauthorized input injection is possible during a Remote Development session.
Risk Assessment
An attacker can manipulate input data in a remote session, potentially leading to unauthorized actions or data leakage.
Recommendation
Update IntelliJ IDEA to version 2026.2 or later.
Original NVD description (English source)
In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session