Arbitrary code execution in JetBrains PhpStorm before project trust (CVE-2026-64808)

JetBrains PhpStorm contains a vulnerability that allows arbitrary code execution to occur before a user has granted project trust via project tooling. This flaw could enable malicious code embedded in a project to execute without the user's explicit authorization during the trust-granting workflow. Affected versions: - PhpStorm before 2026.2 We recommend updating to: PhpStorm 2026.2. CVSS 8.4 · our assessment: this_week Reference: https://www.jetbrains.com/privacy-security/issues-fixed/ Details: https://vuln.today/cve/CVE-2026-64808