Arbitrary code execution in JetBrains WebStorm via linter configuration (CVE-2026-64807)

JetBrains WebStorm before version 2026.2 contains a vulnerability that allows arbitrary code execution via a project-supplied linter configuration. An attacker could exploit this by providing a malicious linter configuration file within a project, potentially compromising the developer's machine upon opening the project in WebStorm. Affected versions: - before 2026.2 We recommend updating to: 2026.2. CVSS 7.8 · our assessment: this_week Reference: https://www.jetbrains.com/privacy-security/issues-fixed/ Details: https://vuln.today/cve/CVE-2026-64807