CVE-2026-75054

MediumCVSS 6.3

Published: 17/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

In JetBrains IntelliJ IDEA before 2026.2.1 SSRF was possible via the OpenAPI preview proxy in untrusted projects.

Risk Assessment

An attacker could exploit SSRF to send requests to internal network resources, potentially leading to compromise of the organization's internal infrastructure.

Recommendation

It is recommended to upgrade IntelliJ IDEA to version 2026.2.1 or later to fix the SSRF vulnerability.

Original NVD description (English source)

In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects