EUVD-2026-60255
GHSA-44p4-x76v-6w5f
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Local vector with user interaction required (export action); no privileges needed beyond running IntelliJ IDEA; full system impact once triggered.
Primary rating from Vendor (jetbrains).
CVSS VectorVendor: jetbrains
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible
AnalysisAI
Remote code execution in JetBrains IntelliJ IDEA before version 2026.2.1 is achievable through the Markdown export tool via OS command injection. An attacker who can deliver a crafted Markdown file to a developer and induce them to export it can execute arbitrary operating system commands in the context of the IntelliJ IDEA process. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the target user is running an unpatched version of JetBrains IntelliJ IDEA (before 2026.2.1) on their local workstation. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS base score of 7.8 (High) is driven by full C/I/A impact once exploitation succeeds, but the vector AV:L/UI:R significantly constrains real-world reach - an attacker cannot exploit this remotely without first getting a crafted Markdown file onto a developer's workstation and inducing them to trigger an export. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | A threat actor embeds OS command injection payloads within a specially crafted Markdown file and delivers it to a target developer via a malicious pull request, shared documentation link, or phishing attachment. The developer opens the file in IntelliJ IDEA and invokes the Markdown export function, triggering unsanitized command execution. … |
| Remediation | Upgrade JetBrains IntelliJ IDEA to version 2026.2.1 or later, which is the fix version stated in the CVE description and confirmed by the vendor at https://www.jetbrains.com/privacy-security/issues-fixed/. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, immediately notify all development teams and disable or restrict access to the Markdown export feature in IntelliJ IDEA until a patch is released. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today