EUVD-2026-60256
GHSA-4gfp-9xp3-f73r
Severity by source
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary rating from Vendor (jetbrains) · only source for this CVE.
CVSS VectorVendor: jetbrains
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
2DescriptionCVE.org
In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log
AnalysisAI
Git credentials are recorded in plaintext to IntelliJ IDEA's local IDE log file in all versions before 2026.1.5, exposing usernames, passwords, and tokens to any entity with read access to those log files. This CWE-532 information disclosure flaw affects the IDE's built-in Git integration subsystem and carries a high confidentiality impact (C:H in CVSS) because exposed credentials can grant full access to remote source code repositories. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today