CVE-2026-64814
HighCVSS 8.6Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
In IntelliJ IDEA before version 2026.2, there is a vulnerability allowing unauthorized file access during a Remote Development session. An attacker can access files they should not have permission to.
Risk Assessment
The risk includes leakage of sensitive data such as source code, configurations, or credentials stored in files accessible during the remote session.
Recommendation
Update IntelliJ IDEA to version 2026.2 or later, which fixes this vulnerability.
Other vulnerabilities in IntelliJ IDEA
See all- CVE-2026-64813Critical
In JetBrains IntelliJ IDEA before 2026.2, unauthorized settings modification was possible in a Remote Development session.
- CVE-2026-59792Critical
In JetBrains IntelliJ IDEA before 2026.1.4 and 2026.2, a vulnerability allowed code execution via path traversal in project workspace ID handling.
- CVE-2026-49383Low
In JetBrains IntelliJ IDEA before 2026.1, the UI Designer form parser is vulnerable to XXE (XML External Entity) attacks.
Original NVD description (English source)
In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session