CVE-2026-64813
CRITICAL
CVSS 10.0
intellij_idea
Verified Advisory
Unauthorized settings modification in JetBrains IntelliJ IDEA Remote Development (CVE-2026-64813)
JetBrains IntelliJ IDEA contains a vulnerability that allows unauthorized modification of settings within a Remote Development session. This could permit an attacker with access to the remote session to alter IDE or project settings without proper authorization.
Affected versions:
- before 2026.2
We recommend updating to: 2026.2.
CVSS 10.0 · our assessment: act_now
Reference: https://www.jetbrains.com/privacy-security/issues-fixed/
Details: https://vuln.today/cve/CVE-2026-64813
Verified by vuln.today against published advisories.
Affected versions
- – before 2026.2
Fixed in: 2026.2
More advisories for intellij_idea
- CVE-2026-64811 – Arbitrary code execution in JetBrains IntelliJ IDEA via dev container configuration (CVE-2026-64811)
- CVE-2026-64812 – Unauthorized input injection in JetBrains IntelliJ IDEA Remote Development (CVE-2026-64812)
- CVE-2026-64814 – Unauthorized file access in JetBrains IntelliJ IDEA Remote Development (CVE-2026-64814)
- CVE-2026-64815 – Arbitrary code injection in JetBrains IntelliJ IDEA via UI Designer form files (CVE-2026-64815)