CVE-2026-64814
HIGH
CVSS 8.6
intellij_idea
Verified Advisory
Unauthorized file access in JetBrains IntelliJ IDEA Remote Development (CVE-2026-64814)
JetBrains IntelliJ IDEA before version 2026.2 contains a vulnerability that allows unauthorized file access during a Remote Development session. An attacker exploiting this flaw could access files without proper authorization within such sessions.
Affected versions:
- before 2026.2
We recommend updating to: 2026.2.
CVSS 8.6 · our assessment: this_week
Reference: https://www.jetbrains.com/privacy-security/issues-fixed/
Details: https://vuln.today/cve/CVE-2026-64814
Verified by vuln.today against published advisories.
Affected versions
- – before 2026.2
Fixed in: 2026.2
More advisories for intellij_idea
- CVE-2026-64811 – Arbitrary code execution in JetBrains IntelliJ IDEA via dev container configuration (CVE-2026-64811)
- CVE-2026-64812 – Unauthorized input injection in JetBrains IntelliJ IDEA Remote Development (CVE-2026-64812)
- CVE-2026-64813 – Unauthorized settings modification in JetBrains IntelliJ IDEA Remote Development (CVE-2026-64813)
- CVE-2026-64815 – Arbitrary code injection in JetBrains IntelliJ IDEA via UI Designer form files (CVE-2026-64815)