CVE-2026-64812
CRITICAL
CVSS 10.0
intellij_idea
Verified Advisory
Unauthorized input injection in JetBrains IntelliJ IDEA Remote Development (CVE-2026-64812)
JetBrains IntelliJ IDEA contains a vulnerability that allows unauthorized input injection during a Remote Development session. An attacker capable of exploiting this flaw could inject arbitrary input into the remote session without proper authorization.
Affected versions:
- IntelliJ IDEA before 2026.2
We recommend updating to: 2026.2.
CVSS 10.0 · our assessment: act_now
Reference: https://www.jetbrains.com/privacy-security/issues-fixed/
Details: https://vuln.today/cve/CVE-2026-64812
Verified by vuln.today against published advisories.
Affected versions
- – IntelliJ IDEA before 2026.2
Fixed in: 2026.2
More advisories for intellij_idea
- CVE-2026-64811 – Arbitrary code execution in JetBrains IntelliJ IDEA via dev container configuration (CVE-2026-64811)
- CVE-2026-64814 – Unauthorized file access in JetBrains IntelliJ IDEA Remote Development (CVE-2026-64814)
- CVE-2026-64813 – Unauthorized settings modification in JetBrains IntelliJ IDEA Remote Development (CVE-2026-64813)
- CVE-2026-64815 – Arbitrary code injection in JetBrains IntelliJ IDEA via UI Designer form files (CVE-2026-64815)