CVE-2026-75060
HighCVSS 8.4Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools.
Risk Assessment
An attacker can execute arbitrary code in the PyCharm environment, potentially leading to full control of the development system.
Recommendation
Upgrade PyCharm to version 2026.2.1 or later.
Other vulnerabilities in JetBrains PyCharm
See all- CVE-2026-75059Medium
In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible.
- CVE-2026-65908High
In JetBrains PyCharm before versions 2026.1.4 and 2026.2, arbitrary code execution was possible via a malicious Python executable when opening an untrusted project.
- CVE-2026-49384Medium
In JetBrains PyCharm before version 2025.3.4, a stored XSS vulnerability was found in Jupyter notebook Markdown cells. An attacker can inject malicious JavaScript that executes in the browser of any user viewing the notebook.
Original NVD description (English source)
In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools
Vulnerability data from NVD (NIST) · CISA KEV · EPSS