Arbitrary code execution in JetBrains IntelliJ IDEA via dev container configuration (CVE-2026-64811)

JetBrains IntelliJ IDEA contains a vulnerability that allows arbitrary code execution through development container configuration before the user has granted project trust. An attacker who can supply a malicious project with a crafted development container configuration could execute arbitrary code on the victim's machine prior to the trust prompt being accepted. Affected versions: - IntelliJ IDEA before 2026.2 We recommend updating to: 2026.2. CVSS 7.8 · our assessment: this_week Reference: https://www.jetbrains.com/privacy-security/issues-fixed/ Details: https://vuln.today/cve/CVE-2026-64811