CVE-2026-75059
MediumCVSS 4.4Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible.
Risk Assessment
An attacker could exploit this vulnerability to execute malicious code in the context of the IDE, potentially leading to compromise of the development system and project security.
Recommendation
It is recommended to upgrade PyCharm to version 2026.2.1 or later to eliminate the risk of code execution.
Other vulnerabilities in JetBrains PyCharm
See all- CVE-2026-75060High
In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools.
- CVE-2026-65908High
In JetBrains PyCharm before versions 2026.1.4 and 2026.2, arbitrary code execution was possible via a malicious Python executable when opening an untrusted project.
- CVE-2026-49384Medium
In JetBrains PyCharm before version 2025.3.4, a stored XSS vulnerability was found in Jupyter notebook Markdown cells. An attacker can inject malicious JavaScript that executes in the browser of any user viewing the notebook.
Original NVD description (English source)
In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible
Vulnerability data from NVD (NIST) · CISA KEV · EPSS