JetBrains
Monthly
JetBrains Toolbox App and IntelliJ IDEA expose a certificate-validation weakness in the jetbrainsd daemon that can let an unauthenticated, network-positioned attacker with a forged certificate chaining to compromised eMudhra intermediate CAs impersonate trusted endpoints and read or modify traffic. Affected versions are Toolbox App before 3.9.1 and 3.8.2 and IntelliJ IDEA before 2026.3 and 2026.2.4; exploitation requires both such a certificate and a man-in-the-middle position, so attack complexity is high even though no authentication or user interaction is needed. No public exploit code has been identified at time of analysis, but the 9.0 severity and vendor-reported root cause make prompt patching the priority.
The embedded browser in JetBrains desktop IDEs - IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand, Rider, CLion, DataGrip, RustRover and DataSpell - continues to trust revoked intermediate certificates, so an attacker holding a man-in-the-middle position on an HTTPS connection opened from that browser can present a chain anchored in a revoked eMudhra intermediate and have it accepted, exposing or altering data the user believes is protected by TLS. Reachability is narrow: the victim must actually load an HTTPS resource in the embedded browser, the attacker must be able to intercept that specific TLS session, and a revoked-but-previously-issued eMudhra intermediate must be available, so ordinary coding activity that never touches the embedded browser is not affected. No public exploit identified at time of analysis, exploitation has not been confirmed, and the issue is prioritized for remediation this week rather than as an emergency; JetBrains has published fixed builds for every affected product line.
Remote code execution affects JetBrains TeamCity releases older than 2026.2, 2026.1.4, and 2025.11.8, where a type-whitelist bypass in the build messages protocol lets a serialized payload cross the deserialization trust boundary and execute code in the server process; the flaw carries a CVSS of 9.8 (AV:N/AC:L/PR:N/UI:N, unauthicated per the PR:N vector). There is no public exploit identified at time of analysis, CISA's SSVC records Exploitation as 'none' with Automatable set to 'no', and EPSS is low at 0.38% (31st percentile), though Technical Impact is rated 'total'. JetBrains has released fixes, so the primary risk is unpatched, network-reachable TeamCity servers whose agent-facing build messages channel is exposed beyond trusted build-agent hosts.
Unauthenticated path traversal in the report blob endpoint of JetBrains Datalore before version 2026.2.1 allows a remote attacker who can reach the service to read arbitrary files accessible to the Datalore process. Per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, base 7.5 HIGH), exploitation requires no credentials and no user interaction, making exposure the primary limiting factor: only network-reachable instances below 2026.2.1 are at risk, and the flaw yields confidentiality loss only, with no integrity or availability impact and no code execution on its own. There is no CISA KEV listing and no public exploit code identified at time of analysis, though the low-complexity, unauthenticated nature of the bug makes it an attractive target for opportunistic scanning of internet-facing deployments.
Code execution in JetBrains Junie CLI before 26.8.3 allows an attacker to run arbitrary code via a malicious MCP server configuration embedded in an untrusted project. The victim must open and interact with the project (user interaction required), and local access is necessary, but no privileges are required. No public exploit code has been identified at time of analysis.
SQL injection in JetBrains Exposed before 1.5.1 enables unauthenticated remote attackers to execute arbitrary SQL against downstream applications that pass attacker-controllable, unescaped string arguments into several affected SQL functions. The library itself is not directly exploitable; exploitation requires a hosting application to route untrusted input into the vulnerable function calls, so applications that only pass literals or use parameterized/escaped paths are unaffected. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 9.8) describes a worst-case nominal impact of full confidentiality, integrity, and availability loss; no public exploit code or confirmed active exploitation (CISA KEV) was identified at time of analysis.
Information disclosure in JetBrains TeamCity before 2026.2.1 allows a crafted Git submodule URL to make the server read files from local repositories reachable by the TeamCity service account, exposing source code and other local repository contents. The supplied NVD vector rates this as network-reachable without privileges (PR:N), but our assessment applies a low-privileged precondition (PR:L), because the attacker must be able to influence a submodule URL - typically by committing a malicious .gitmodules file to a repository TeamCity checks out, or by controlling a VCS root - on an instance configured to resolve Git submodules. Impact is confidentiality-only with no integrity or availability effect; EPSS is low (0.62%, 48th percentile), SSVC records no exploitation activity, and no public exploit code has been identified at time of analysis.
Sandbox escape in JetBrains TeamCity's Kotlin DSL configuration mechanism allows an attacker who can supply or modify versioned-settings build configuration code to run arbitrary code on the TeamCity server, breaking out of the DSL evaluation sandbox. The vendor advisory covers TeamCity releases before 2026.1.3 and before 2025.11.7; the CVSS 3.1 vector published with the CVE is a full 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H), while our independent assessment scores it lower at PR:L because practical exploitation requires the ability to inject Kotlin DSL - realistically project-administration/edit rights in the TeamCity UI or write/commit access to the VCS repository holding the project's versioned settings - and the Kotlin DSL / versioned settings feature must actually be enabled. Risk signals here are genuinely conflicting and should be read carefully: a maximum-severity scope-changing RCE sits alongside a low EPSS of 0.27% (18th percentile), CISA SSVC 'Exploitation: none' and 'Automatable: no', and no public exploit identified at time of analysis, so this looks more like a high-impact but privilege-gated flaw than a broadly wormable one.
Stored XSS in JetBrains YouTrack before 2026.2.19422 allows an authenticated user with content-creation rights to inject malicious Mermaid or LaTeX markup that executes in the browser of any user who views the affected issue, comment, or similar content. The vendor CVSS is 8.1, but the independent assessment lowers this to CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N, reflecting required authentication (unless anonymous/guest issue reporting is enabled), victim interaction, and low confidentiality/integrity impact; signals lean toward moderate real-world priority. No public exploit code or CISA KEV active exploitation was identified at time of analysis.
Privilege escalation in JetBrains YouTrack lets an authenticated holder of an already-high-privilege (non-admin) account raise their effective permissions by abusing the user group links functionality, where a required authorization check is missing (CWE-862). All YouTrack releases before 2026.2.19422 are affected, and the issue is scored CVSS 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) with high confidentiality, integrity, and availability impact once triggered, requiring no user interaction. The PR:H prerequisite meaningfully bounds exposure - anonymous or fully unprivileged users cannot exploit it - and there is no public exploit identified at time of analysis, making this a real but gated finding rather than an urgent fire-drill.
Broken access control in JetBrains YouTrack before 2026.2.19422 allows any authenticated user to add themselves to a project team, gaining unauthorized access to restricted issues. This CVE-2026-103488 has a CVSS score of 7.1 and requires a low-privileged account (PR:L); no public exploit code has been identified at time of analysis. The flaw is classified as CWE-863 (Incorrect Authorization) and affects all YouTrack versions prior to the fixed release 2026.2.19422.
Account takeover in JetBrains YouTrack before 2026.2.19197 is possible because the application accepts a replayed notification signature, allowing an attacker who has captured a legitimate signature to authenticate as the associated account. Every YouTrack instance running an earlier build is affected (CPE cpe:2.3:a:jetbrains:youtrack:*:*:*:*:*:*:*:*), and the root cause is an incorrect-authorization flaw (CWE-863) rather than memory corruption. The practical barrier is signature acquisition: our assessment rates this CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N (high, not the input's 9.8 critical) because exploitation depends on capturing or observing a victim's notification signature rather than a blind unauthenticated request against a default install. No public exploit code and no confirmed active exploitation have been identified (EPSS 0.33%, 24th percentile; CISA SSVC lists Exploitation: none), and JetBrains has released a fix in 2026.2.19197.
Incorrect authorization in JetBrains YouTrack before version 2026.2.19197 allows guest users to strip a workflow action's visibility restriction and then execute that action, altering workflow behavior on the instance. The flaw is network-reachable and rated CVSS 7.5 with a PR:N vector, though practical exposure depends on guest access being enabled on the target instance - a configuration in which the guest context supplies the effective precondition; disabling guest access removes the attack surface entirely. Impact is limited to integrity of workflow actions (no confidentiality or availability effect), there is no public exploit identified at time of analysis, EPSS is low (0.29%, roughly 19th percentile), CISA SSVC records exploitation status as none, and the vendor has released a patch in 2026.2.19197.
Unauthenticated remote attackers can execute arbitrary code in JetBrains YouTrack before 2026.2.19197 by abusing an authorisation bypass in the scripts debugger, a CVSS 3.1 9.8 flaw (PR:N/UI:N, scope unchanged, confidentiality/integrity/availability all High). Real-world urgency is low despite the score: EPSS is 0.36% (28th percentile), no public exploit code has been identified at time of analysis, CISA SSVC reports Exploitation: none, and there is no KEV listing. Exposure depends on deployment - the debugger endpoint being unreachable, behind an authenticating proxy, or disabled materially lowers risk - and a vendor fix is available in 2026.2.19197.
Incorrect authorization in JetBrains YouTrack before 2026.2.18991 lets a user who holds only read-only access to a project overwrite that project's notification templates, an action that should require higher project privileges. The attack is network-reachable and needs no user interaction, but it does require an authenticated account (CVSS PR:L) that already has visibility into the target project, and the effect is scoped to a single project's notification configuration. Severity is moderate (vendor score 7.1; independently assessed impact limited to integrity, with no confidentiality or availability effect), EPSS is low at 0.31% (22nd percentile), CISA SSVC rates exploitation as none and non-automatable, and no public exploit code has been identified at time of analysis. JetBrains has released a fix.
Local code execution in JetBrains IntelliJ IDEA before 2026.2.3 is possible when a developer opens an attacker-supplied untrusted project, because malicious Structural Search script constraints then run within the IDE. The flaw is assessed as CVSS 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), meaning exploitation is local and requires the victim to open the project, but no target authentication is needed and default configurations are affected once that action occurs. No public exploit or confirmed active exploitation was identified at time of analysis; the risk is real but gated by social engineering and the local attack vector.
JetBrains TeamCity versions prior to 2026.2, 2026.1.4, and 2025.11.8 contain a flaw in the password reset mechanism that permits an unauthenticated remote attacker to take over an administrator account. The vulnerability requires a non-trivial condition (AC:H) related to improper validation of input equivalence (CWE-1289), so exploitation is not fully turnkey. No public exploit code has been identified at the time of analysis, but the high impact (C/I/A:H) and remote, unauthenticated attack vector make this a genuinely high-priority flaw despite thin external signals; upgrading to the specified versions removes the vulnerability.
Command execution on Windows-based JetBrains TeamCity servers allows authenticated users with Pipeline Git connection configuration privileges to run arbitrary OS commands via CRLF injection in connection settings, affecting versions before 2026.2, 2026.1.4, and 2025.11.8. The flaw requires authentication (PR:L per CVSS) and only impacts Windows deployments; no public exploit code has been identified at time of analysis. With a CVSS score of 8.8, successful exploitation grants high confidentiality, integrity, and availability impact.
Remote code execution in JetBrains TeamCity (CVE-2026-100253) lets an authenticated attacker with permission to edit a project's versioned settings escape the Kotlin DSL sandbox and execute code on the TeamCity server. Affected versions are those before 2026.2, before 2026.1.4, and before 2025.11.8. No public exploit identified at time of analysis, but this is a genuine high-priority issue rather than an inflated CVSS score because it can compromise a CI/CD server; exploitation requires a low-privileged, non-anonymous account able to supply or commit malicious Kotlin DSL settings.
Host-level code execution in JetBrains IntelliJ IDEA before 2026.2.2 is triggered when a developer opens a malicious project containing a crafted Dev Container configuration, which the IDE proceeds to build without first requesting the standard project-trust confirmation. The flaw (CWE-829) allows untrusted, project-defined container build scripts and Docker commands to execute directly on the developer's host machine, bypassing the IDE's safety gate. JetBrains confirmed the issue and released a fix in version 2026.2.2; no public exploit has been identified at time of analysis.
Local code execution on Remote Development hosts is possible in JetBrains IntelliJ IDEA versions before 2026.2.2 due to the IJent gRPC server running without TLS encryption or any authentication mechanism. The IJent agent, deployed on remote hosts when the Remote Development feature is in use, accepts connections from any local process without requiring credentials, enabling arbitrary command execution under the agent's security context. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Incorrect authorization in JetBrains YouTrack before versions 2025.3.160480 and 2026.1.14047 allows authenticated low-privilege users to modify linked issue entities they lack update permission on by issuing PUT requests directly to link sub-resources. The flaw bypasses YouTrack's permission model at the HTTP method level, enabling integrity violations across project boundaries-reflected in the CVSS scope change (S:C). No public exploit code or active exploitation has been identified at time of analysis.
Unauthorized integrity modification in JetBrains YouTrack before 2026.2.18634 allows any authenticated low-privilege user to alter links on issues they are explicitly prohibited from accessing by exploiting the whiteboard clone operation. The whiteboard clone workflow fails to validate the cloning user's authorization against issues referenced in the board, enabling cross-boundary write access governed by CWE-862 (Missing Authorization). No public exploit has been identified at time of analysis, but the CVSS 7.7 vector (S:C, I:H, PR:L, AC:L) accurately reflects the low barrier to exploitation and the cross-domain integrity impact.
Cross-tenant GitHub App installation token theft in JetBrains YouTrack before 2026.2.18634 lets any authenticated user retrieve GitHub App installation tokens belonging to other tenants due to a shared, non-isolated token cache. The root cause is CWE-488 (Exposure of Data Element to Wrong Session): cached tokens were keyed without tenant-scope isolation. With a stolen installation token, an attacker can authenticate to the GitHub API as the victim organization's GitHub App, gaining access to that organization's repositories, pull requests, issues, and CI/CD integrations; no public exploit has been identified at time of analysis.
Privilege escalation in JetBrains YouTrack before version 2026.2.18634 enables authenticated low-privileged users to alter group memberships without proper server-side authorization validation, effectively granting themselves elevated rights. The flaw (CWE-266, Incorrect Privilege Assignment) means the application trusts client-supplied group membership parameters without enforcing that the requesting user has the authority to make such changes. With a CVSS base score of 8.8 and full C:H/I:H/A:H impact, successful exploitation yields the equivalent of full administrative control over the YouTrack instance.
Privilege escalation to superuser in JetBrains Hub before 2026.2.52442 allows an unauthenticated remote attacker to register a trusted service and thereby obtain full administrative (superuser) control over the identity-management server. Because Hub is the single sign-on and authorization backbone for JetBrains tooling (YouTrack, TeamCity, Upsource), compromise cascades to every application relying on it for authentication. No public exploit has been identified at time of analysis, and the CVE is not listed in CISA KEV.
Missing authorization in JetBrains YouTrack's REST API allows authenticated low-privileged users to access and modify restricted resources via Insecure Direct Object Reference (IDOR). Affected versions span all YouTrack releases prior to 2026.2.18788, 2026.1.14055, and 2025.3.161254 across three active release branches. An attacker with any valid account can enumerate or directly reference object identifiers in REST API calls to read or write data they should not have access to, with high confidentiality and integrity impact per the CVSS vector.
Unauthenticated account takeover in JetBrains YouTrack's Helpdesk feature allows a remote attacker to hijack existing accounts by asserting a victim's email address without proving ownership of it. All YouTrack builds before 2025.3.161254 and 2026.1.14042 are affected. Because the flaw is a trust failure in how Helpdesk associates a self-provided email with an account, exploitation requires no credentials, no user interaction, and works against default configurations where Helpdesk is enabled. No public exploit identified at time of analysis.
Code execution in JetBrains PyCharm before 2026.2.1 is possible through Jupyter MCP (Model Context Protocol) tools that expose critical functions without authentication. The root cause is CWE-306 (Missing Authentication for Critical Function) - the MCP tool surface in PyCharm's Jupyter integration fails to enforce any authentication check before executing code. Any local attacker able to reach the MCP endpoint can trigger arbitrary code execution with the privileges of the running PyCharm process, achieving full confidentiality, integrity, and availability impact. No public exploit code has been identified at time of analysis.
Remote code execution in JetBrains IntelliJ IDEA before version 2026.2.1 is achievable through the Markdown export tool via OS command injection. An attacker who can deliver a crafted Markdown file to a developer and induce them to export it can execute arbitrary operating system commands in the context of the IntelliJ IDEA process. No public exploit or CISA KEV listing has been identified at time of analysis, but the CWE-78 root cause and full C/H/I/H/A:H impact make this a meaningful risk for development workstation environments.
Unauthorized project transfer between organizations in JetBrains YouTrack before version 2026.2.17917 exposes high-severity access control failure affecting any multi-tenant or multi-organization deployment. Any authenticated low-privileged user can transfer projects across organizational boundaries without holding the necessary authorization, resulting in high confidentiality and integrity impact against affected projects and their data. No public exploit or CISA KEV listing is identified at time of analysis, but the low attack complexity and authentication-only requirement make this straightforwardly exploitable by any active YouTrack user.
Stored cross-site scripting in JetBrains YouTrack before 2026.2.18068 allows remote attackers to persist malicious script payloads via the language label field of fenced code blocks in issues or comments. When any authenticated user views the affected content, the injected script executes within the YouTrack application origin - a scope change that enables session token theft, credential harvesting, or unauthorized actions on behalf of the victim (CVSS C:H). No public exploit code has been identified at time of analysis, but the low-complexity network vector makes this straightforward to weaponize once a reporter or contributor role is obtained.
Unauthenticated database backup disclosure in JetBrains YouTrack before 2025.3.156085, 2026.1.13913, and 2026.2.18112 allows a remote attacker to abuse a shared draft signature to download full database backups without any credentials. Because backups typically contain issue data, user records, and secrets, this is a high-impact confidentiality exposure. No public exploit has been identified at time of analysis and it is not listed in CISA KEV, but the CVSS 9.1 rating and trivial network exploitability make it a priority patch.
Missing authorization on the mailbox endpoint in JetBrains YouTrack enables any authenticated user to delete arbitrary entities across the platform, regardless of ownership or role. Affected versions span three active release branches: all releases prior to 2025.3.156085, 2026.1.13914, and 2026.2.18095. The CVSS 3.1 score of 8.1 (High) reflects high integrity and availability impact with a low-privilege authentication bar; no public exploit code or confirmed active exploitation (CISA KEV) has been identified at time of analysis.
Remote code execution in JetBrains TeamCity before 2026.1.3 and 2025.11.7 allows unauthenticated attackers to execute arbitrary code via deserialization of untrusted data in the agent polling protocol. The vulnerability carries a CVSS 9.8 score and poses immediate risk to any exposed TeamCity instance. No public exploit or active exploitation has been confirmed at the time of analysis.
Code execution in JetBrains TeamCity (before 2026.1.2 and 2025.11.6) allows a privileged user to run arbitrary code through Git VCS root configuration, mapping to CWE-94 code injection. The CVSS 3.1 score of 9.1 reflects a scope-changing flaw (S:C) that requires high privileges (PR:H) but no user interaction, meaning an attacker with rights to configure VCS roots can escalate into code execution on the CI/CD infrastructure. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV; it was self-reported by JetBrains.
Arbitrary code execution in JetBrains PyCharm before 2026.1.4 and 2026.2 lets an attacker who supplies a crafted project achieve code execution when a victim opens that untrusted project in the IDE. PyCharm auto-selects or trusts a Python executable bundled or referenced by the project, so merely opening the malicious project runs attacker-controlled code with the user's privileges. No public exploit identified at time of analysis, and it is not listed in CISA KEV, but the reporter is JetBrains itself and a vendor patch is available.
Remote code execution in JetBrains TeamCity before 2026.1.2 and 2025.11.6 allows an attacker to escape the Kotlin DSL sandbox used to define build configurations-as-code and run arbitrary code in the context of the CI server. Because TeamCity servers hold VCS credentials, deployment keys, and build artifacts, a successful escape effectively compromises the entire build pipeline and downstream software supply chain. There is no public exploit identified at time of analysis, and the flaw is not listed in CISA KEV; EPSS is low at 0.40% (33rd percentile).
Arbitrary code injection in IntelliJ IDEA before version 2026.2 allows remote attackers to execute arbitrary code by convincing a developer to open a malicious UI Designer form file, leading to full system compromise. No active exploitation or public exploit code has been reported, but a critical-severity vendor patch is available.
Unauthorized file access in JetBrains IntelliJ IDEA before 2026.2 allows remote attackers to read files they should not be able to reach during a Remote Development session, bypassing intended authorization controls (CWE-862). The high CVSS score (8.6) reflects a scope-changed confidentiality impact, meaning the exposure can extend beyond the vulnerable component to the host system serving the remote session. There is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV.
Unauthorized settings modification in JetBrains IntelliJ IDEA before 2026.2 allows attackers to alter configuration within an active Remote Development session without proper authorization, tagged by the vendor as an authentication bypass. Because Remote Development connects a local client to a remote backend IDE, tampering with settings can subvert the security boundary between client and host. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV, but the vendor-assigned CVSS of 10.0 with scope change signals maximum theoretical severity.
Authentication bypass via unauthorized input injection in JetBrains IntelliJ IDEA before 2026.2 allows remote attackers to inject unauthorized input into an active Remote Development session, undermining the trust boundary between client and backend host. Because the flaw stems from missing authentication (CWE-306) on a Remote Development channel and carries a maximal CVSS 10.0 with scope change, a successful attacker can influence code, files, or execution on the remote workspace. There is no public exploit identified at time of analysis, but the ceiling severity warrants prompt patching.
Arbitrary code execution in JetBrains IntelliJ IDEA before 2026.2 allows a malicious project to run attacker-controlled code before the user grants project trust, by abusing development container (dev container) configuration that the IDE processes prematurely. Any developer who opens or clones a crafted repository is affected, since code executes ahead of the trust prompt that is supposed to gate untrusted projects. There is no public exploit identified at time of analysis and the flaw is not in CISA KEV, but the local, low-complexity nature and RCE tagging make it a meaningful supply-chain-of-code risk.
Arbitrary code execution in JetBrains PhpStorm before 2026.2 allows a malicious project to run attacker-controlled code through the configured interpreter before the developer grants project trust, bypassing the IDE's trust-gate safeguard. Tagged as RCE by the reporting vendor (JetBrains), the flaw carries a CVSS 8.4 and requires a developer to open a crafted project locally. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Arbitrary code execution in JetBrains PhpStorm before 2026.2 allows a malicious project to run code through project tooling before the user grants project trust, bypassing the IDE's trust-boundary safeguard. Reported by JetBrains itself (cve@jetbrains.com) and tagged RCE, it lets an attacker who tricks a developer into opening a crafted repository execute code in the developer's context. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the local high-impact (C:H/I:H/A:H) nature makes it relevant for developer-workstation threat models.
Arbitrary code execution in JetBrains WebStorm before 2026.2 allows a malicious project to run attacker-controlled code on a developer's machine by supplying a crafted linter configuration that the IDE trusts and executes when the project is opened. Reported by JetBrains itself (cve@jetbrains.com) and tagged RCE, the flaw carries CVSS 7.8 (high) with a local vector and required user interaction. There is no public exploit identified at time of analysis and no CISA KEV listing, indicating no confirmed active exploitation to date.
Arbitrary code execution in JetBrains WebStorm before 2026.2 allows a malicious project to run code through the configured Node.js interpreter before the developer grants the project the required trust. Any developer who opens (or clones and opens) an attacker-supplied project is affected, since the IDE's trust prompt - designed to gate execution - is bypassed. No public exploit has been identified and it is not in CISA KEV, but the RCE and Node.js tags plus a local, no-privilege CVSS 8.4 vector make this a meaningful supply-chain/developer-workstation risk.
Arbitrary code execution in JetBrains WebStorm before 2026.2 lets a malicious project run code on a developer's machine before the IDE's project-trust prompt is ever answered, by abusing project-local package-manager tooling that the IDE invokes automatically. Because execution happens prior to the trust gate, the safety boundary meant to protect users who merely open an untrusted repository is bypassed. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the RCE tag and full C/I/A impact make this a meaningful developer-workstation risk.
Arbitrary code execution in JetBrains WebStorm before 2026.2 allows a malicious project to run code via project-local linter tooling before the user grants project trust, bypassing the IDE's Trust Projects safeguard. The flaw (CWE-829) affects developers who open or import a crafted repository; no public exploit or active exploitation has been identified, and no EPSS/KEV signal is present in the provided data. Fixed in WebStorm 2026.2.
Arbitrary code execution in JetBrains GoLand IDE before version 2026.2 allows a malicious project to run attacker-controlled code via the configured Go SDK before the user grants project trust, bypassing the trust-boundary safeguard meant to gate execution. Any developer who merely opens a crafted repository (for example, cloned from a public source) can be compromised without ever clicking 'Trust Project'. This is a CWE-94 code injection weakness with a CVSS 7.8; no public exploit code or active exploitation has been identified at time of analysis.
Arbitrary code execution in JetBrains GoLand before 2026.2 allows a malicious Go project to run attacker-controlled code through the Go Modules integration before the developer explicitly grants project trust. Because the trust prompt is meant to be the safeguard against exactly this, opening or previewing a crafted repository is sufficient for compromise. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Authentication bypass in JetBrains YouTrack allows attackers to obtain full administrative access by leveraging a direct-database-access code path, per CWE-306 (missing authentication for a critical function). All self-hosted YouTrack builds prior to the 2026.1.13757 / 2025.3.148033 / 2025.2.148048 / 2025.1.148120 / 2024.3.148430 / 2024.2.148429 fix trains are affected, and JetBrains rates it CVSS 10.0. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the maximal severity score and administrative impact make prompt patching essential.
Improper permission enforcement in JetBrains TeamCity before 2026.1.2 lets authenticated low-privilege users modify CI/CD pipelines they should not control, undermining build integrity and potentially exposing pipeline secrets. Reported by JetBrains itself and carrying a CVSS 8.1, the flaw is a missing-authorization issue (CWE-862) rather than a memory-safety bug. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Arbitrary file access in JetBrains TeamCity before 2026.1.2 lets an authenticated user abuse the Perforce (P4) VCS integration to read files outside intended boundaries on the TeamCity server host. The flaw (CWE-73, external control of file name or path) was self-reported by JetBrains and is fixed in 2026.1.2; no public exploit identified at time of analysis, and it is not listed in CISA KEV. With PR:L in the CVSS vector, exploitation requires a low-privilege account that can define or influence a Perforce VCS root, making it a realistic post-authentication threat on shared CI servers.
Code execution via path traversal in JetBrains IntelliJ IDEA before 2026.1.4 and 2026.2 lets an attacker abuse improper sanitization of the project workspace ID to write or reference files outside the intended workspace directory, culminating in arbitrary code execution. The flaw was self-reported by JetBrains and a fix is available; no public exploit has been identified at time of analysis. The NVD-assigned CVSS of 9.8 (network, no privileges, no user interaction) is notably high for a desktop IDE flaw and warrants scrutiny given that IDE project-handling bugs typically require a victim to open a crafted project.
Remote code execution in JetBrains Kotlin before 2.4.20 stems from unsafe deserialization (CWE-502) of build cache metadata, allowing an attacker who can influence cached build artifacts to execute arbitrary code during a build. The flaw carries a CVSS 9.8 (C:H/I:H/A:H) rating, but there is no public exploit identified at time of analysis and EPSS is very low (0.11%, 2nd percentile), and CISA SSVC marks exploitation as 'none'. JetBrains, who reported the issue, has released a fixed version (2.4.20).
Prototype pollution in JetBrains YouTrack's websandbox bridge (all versions before 2026.2.16593) lets an attacker who can reach the sandbox boundary corrupt JavaScript Object.prototype, potentially escaping the sandbox or disclosing information. The flaw was internally reported by JetBrains and classed as CWE-1321; it carries a vendor-published CVSS of 9.8, but no public exploit has been identified at time of analysis and EPSS rates exploitation probability low at 0.40% (32nd percentile).
Improper authorization in JetBrains YouTrack's app configurations endpoint lets remote attackers modify project settings they should not be permitted to change, affecting all versions before 2026.2.16593. The flaw (CWE-862, Missing Authorization) impacts integrity only - no data disclosure or service disruption - and was self-reported by JetBrains with a patch already available. No public exploit identified at time of analysis, and EPSS exploitation probability is low (0.16%, 5th percentile).
Information disclosure in JetBrains YouTrack before 2026.2.16593 allows remote attackers to read other users' private data through a missing authorization check on the comment templates endpoint. The flaw is unauthenticated and network-reachable per the CVSS vector (PR:N), exposing confidential information without any user interaction. There is no public exploit identified at time of analysis, and the EPSS probability is low (0.16%, 6th percentile).
Authentication bypass in JetBrains Hub (the identity and account-management server behind TeamCity, YouTrack, and other JetBrains tools) lets an actor obtain administrative access by going through direct database access, per JetBrains' own advisory. Classified under CWE-306 (Missing Authentication for a Critical Function) and vendor-scored CVSS 9.8, it affects all builds before the fixed 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, and 2024.2.148429 releases. There is no public exploit identified at time of analysis and the EPSS probability is low (0.44%, 35th percentile), but full administrative compromise is the stated technical impact.
Privilege escalation in JetBrains Hub (versions prior to 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, and 2024.2.148429) allows an authenticated attacker to attach additional authentication details to existing accounts, enabling unauthorized access and elevation of privileges. The flaw, self-reported by JetBrains and patched, carries a CVSS 8.8 with high impact to confidentiality, integrity, and availability; no public exploit is identified at time of analysis and EPSS exploitation probability is low (0.41%).
Account takeover in JetBrains Hub is possible through predictable restore codes, affecting all versions prior to 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, and 2024.2.148429. Remote unauthenticated attackers can guess or predict the restore codes used for account recovery, enabling them to seize control of arbitrary user accounts. No public exploit identified at time of analysis, but the CVSS 9.8 rating reflects the high impact of full account compromise across an identity management platform.
Remote code execution in JetBrains GoLand before 2026.1.3 lets an attacker run arbitrary code on a developer's machine when the victim opens a maliciously crafted project whose configuration is untrusted. The flaw, reported by JetBrains itself and assigned CVSS 8.8 with high confidentiality, integrity, and availability impact, requires the user to open the booby-trapped project (UI:R) but no prior authentication on the IDE. There is no public exploit identified at time of analysis, and the EPSS probability is low at 0.21% (11th percentile).
Code execution in JetBrains IntelliJ IDEA prior to 2026.1 is achievable through server-side template injection (SSTI) in the built-in Copyright plugin, which lets an attacker embed executable template expressions into copyright profile configurations. Because the CVSS vector is local with required user interaction (AV:L/UI:R), exploitation hinges on a developer opening or importing a malicious project/profile that triggers the injected template, running with the victim's privileges. There is no public exploit identified at time of analysis and EPSS is 0.00%, consistent with the SSVC 'exploitation: none' assessment.
Information disclosure in JetBrains TeamCity prior to version 2026.1 allows authenticated low-privilege users to read sensitive build configuration parameters they should not have access to due to missing authorization checks. The flaw carries a CVSS 7.6 score driven by high confidentiality impact on a network-reachable CI/CD server, though no public exploit identified at time of analysis. Because TeamCity build parameters frequently contain secrets such as deployment credentials, signing keys, and API tokens, the disclosure can cascade into broader compromise of downstream systems.
Remote code execution in JetBrains TeamCity before 2026.1 allows an authenticated user with project/build configuration rights to run arbitrary code on the CI server by tampering with Perforce (P4) connection settings. The flaw stems from unsafe handling of version-control connection parameters (CWE-88, argument injection), and while it carries a high CVSS of 8.8 with total technical impact, there is no public exploit identified at time of analysis and its EPSS probability is 0.00%.
Server-side request forgery in JetBrains TeamCity versions prior to 2026.1 and 2025.11.5 allows remote unauthenticated attackers to coerce the build server into issuing arbitrary outbound HTTP requests through the build status functionality. The CVSS 7.5 score (C:H/I:N/A:N) reflects high-impact disclosure of internal data without integrity or availability effects, and no public exploit is identified at time of analysis.
Reflected cross-site scripting in JetBrains TeamCity before 2026.1.1 allows an attacker to inject arbitrary script into a victim's browser via the keyword filter parameter, executing in the context of the TeamCity web UI. Because TeamCity is a CI/CD orchestration server holding build secrets and privileged sessions, a tricked authenticated user (e.g. an administrator) clicking a crafted link can have their session or sensitive data compromised. There is no public exploit identified at time of analysis, and the EPSS probability is very low (0.01%).
Information disclosure in JetBrains YouTrack before 2026.1.13162 allows remote unauthenticated attackers to obtain sensitive data through fetchApp requests. The flaw exposes confidential information without requiring authentication or user interaction, but carries no integrity or availability impact. There is no public exploit identified at time of analysis, and the EPSS score of 0.00% reflects no observed exploitation activity.
Command execution in JetBrains IntelliJ IDEA before 2026.1.1 allows a holder of the low-privileged guest user account to run operating-system commands it should not be authorized to invoke, effectively bypassing intended authorization boundaries. The flaw carries a CVSS 8.8 rating with total technical impact, but there is no public exploit identified at time of analysis and the EPSS probability is 0.00%, indicating no observed or predicted mass exploitation. It was reported by JetBrains and is fixed in 2026.1.1.
Command injection in JetBrains IntelliJ IDEA before 2026.1.1 allows attackers to execute arbitrary OS commands by abusing the filename completion feature when a developer interacts with a crafted filename. The flaw is locally exploitable with user interaction required and has high impact on confidentiality, integrity, and availability. No public exploit identified at time of analysis and the issue is not listed in CISA KEV.
JetBrains TeamCity before 2026.1 and 2025.11.5 can expose its server API to unauthorised access, allowing remote attackers to read data the API was meant to protect, with confidentiality-only impact and no effect on integrity or availability. Authentication requirements are not confirmed from available data: the description refers to 'authenticated users' while the published CVSS vector encodes PR:N, so the assessed vector uses PR:L and the precondition remains unresolved. No public exploit was identified at time of analysis; EPSS is 0.00%, CISA SSVC records no exploitation and no automatable path, and the vendor has released fixes.
Local file disclosure in IntelliJ IDEA's built-in web server allows remote attackers to read arbitrary local files via network requests requiring user interaction. JetBrains IDEA versions before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, and 2026.1.1 are affected. The vulnerability achieves scope change (CVSS S:C) enabling cross-context information theft with high confidentiality impact but no integrity or availability damage. No active exploitation (KEV-absent) or public POC identified at time of analysis, though vendor disclosure suggests controlled remediation timeline.
Command execution in JetBrains Junie before version 252.549.29 allows local attackers to execute arbitrary commands by crafting malicious project files, requiring user interaction to open the file. The vulnerability affects all Junie versions prior to the patched release and exploits unsafe handling of project file content without proper sanitization.
Sandbox escape in JetBrains YouTrack before 2025.3.131383 allows high-privileged users to execute arbitrary code on the server. The vulnerability affects all YouTrack versions prior to 2025.3.131383 and is classified as both an authentication bypass and server-side template injection (SSTI). EPSS scoring indicates 0% exploitation probability with no evidence of active exploitation or public POCs. Despite a CVSS score of 7.2, the requirement for high-level administrative privileges significantly constrains real-world attack surface to insider threats or compromised admin accounts.
Authenticated users in JetBrains YouTrack versions prior to 2025.3.121962 can bypass authorization controls to access the app permissions endpoint, potentially allowing privilege escalation or unauthorized modification of application settings. This vulnerability requires valid login credentials but has no complexity requirements, enabling attackers with low-level access to gain high-impact capabilities including confidentiality and integrity violations. No patch is currently available.
JetBrains Hub before 2025.3.119807 has an authentication bypass allowing administrative actions without proper credentials.
In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible [CVSS 8.2 HIGH]
Path traversal in JetBrains TeamCity before 2023.11.4 enables remote attackers to perform a limited set of administrative actions by bypassing authentication controls on specific endpoints. This vulnerability is confirmed actively exploited (CISA KEV) with publicly available exploit code, and carries an EPSS score of 82.47% (99th percentile), placing it among the highest-probability exploitation targets currently tracked.
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Stored cross-site scripting (XSS) in JetBrains TeamCity's classic build log allows an authenticated user with permission to inject content into build output to execute arbitrary JavaScript in the browser of another user who views the affected log. The flaw affects TeamCity versions before 2026.2, 2026.1.4, and 2025.11.8, and exploitation requires both authentication and victim interaction, making it a moderate-severity risk (vendor CVSS 6.7). No public exploit code has been identified at time of analysis.
Stored cross-site scripting (XSS) in JetBrains TeamCity versions before 2026.2, 2026.1.4, and 2025.11.8 allows an authenticated low-privilege attacker to inject malicious scripts into the classic project overview page, which execute in the context of any user-including higher-privileged administrators-who navigates to that view. The vulnerability requires the attacker to have a valid TeamCity account with rights to store content that renders in the classic overview, and a privileged victim must actively open that legacy view; no public exploit code has been identified at time of analysis. The independent assessment rates the overall risk as conditional rather than critical, noting that instances not exposing the classic overview to low-privilege contributors are not realistically exploitable.
Missing authorization in the mail rules feature of JetBrains YouTrack allows an authenticated user holding project-administrator privileges to execute issue commands against projects they do not administer. The flaw (CWE-862) is reachable remotely over the network with low attack complexity, but it is privilege-gated: the attacker must already hold project-admin rights and the instance must process mail rules, so exposure is concentrated in multi-team or multi-tenant deployments where project administration is delegated. Impact is a serious integrity and confidentiality concern for affected projects (CVSS 6.5), but there is no public exploit identified at time of analysis and no indication of active exploitation. Fixed builds are available in the 2026.2 and 2026.3 release lines.
Server-side request forgery in JetBrains YouTrack before 2026.2.19422 allows an authenticated user holding administrative or project-level privileges to abuse the GitHub VCS integration and coerce the YouTrack server into issuing requests to destinations of the attacker's choosing. With a CVSS 3.1 base score of 5.5 (AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N), the impact is bounded to limited confidentiality and integrity loss with a scope change, and the high privilege prerequisite is the dominant limiting factor - this is a moderate-severity, low-real-world-priority issue rather than an anonymous or default-configuration exposure. At the time of analysis there is no confirmed active exploitation (not in CISA KEV) and no public exploit identified at time of analysis.
Authenticated users of JetBrains YouTrack before version 2026.2.19422 can read notifications belonging to other users by directly referencing inbox thread identifiers that lack a proper per-user ownership check. The flaw is a classic insecure direct object reference (CWE-639) reachable over the network with low complexity and no user interaction, but it requires a valid low-privilege account, so it is not exploitable by unauthenticated outsiders. Impact is limited to confidentiality - disclosure of other users' notification contents - with no evidence of modification, service disruption, active exploitation, or publicly available exploit code at time of analysis; EPSS and KEV data were not provided, and the vendor has released a fix.
Authenticated users on JetBrains YouTrack instances running versions prior to 2026.2.19422 can trigger unauthorized reloads of translation catalogs because the endpoint enforcing that operation lacks a proper authorization check (CWE-862). Exploitation is bounded by the CVSS vector (AV:N/AC:L/PR:L/UI:N) - a valid low-privileged account is required, and the impact is confined to availability (A:L) with no data disclosure or modification (C:N/I:N). No public exploit code has been identified at time of analysis and there is no evidence of confirmed active exploitation; the overall real-world risk is low, and the vendor has shipped a fixed release.
Privilege escalation in JetBrains YouTrack before 2026.2.19422 allows an authenticated attacker with pre-existing elevated privileges (CVSS PR:H) to abuse user-group membership changes and gain higher privileges, though success requires a specific group-configuration state (AC:H). The flaw is network-reachable (AV:N) and needs no user interaction (UI:N), but the high privilege and configuration prerequisites sharply narrow realistic risk to insiders or holders of a compromised privileged account; no public exploit identified at time of analysis. Vendor CVSS 6.6 Medium and CWE-266 (Incorrect Privilege Assignment) match the assessed vector and the need to manipulate group membership under constrained conditions.
Denial of service in JetBrains YouTrack instances running versions before 2026.2.19422 lets an authenticated user who can upload attachments hang or crash the server by submitting a crafted PSD file that drives the image-processing path into an infinite loop. The attack is network-reachable and needs no victim interaction, but it requires a valid low-privileged account (PR:L), so it is not exploitable by fully anonymous visitors unless the instance permits self-registration or guest attachment uploads; impact is confined to availability, with no confidentiality or integrity loss. No public exploit code has been identified at time of analysis, and the issue is not listed in CISA KEV.
Authorization bypass in JetBrains YouTrack before 2026.2.19422 allows an authenticated user with only low privileges to read the activity history of restricted issues they are not authorized to view. The root cause is an insecure direct object reference in the issue activities API, where the endpoint resolves a caller-supplied issue identifier without verifying that the caller holds read access to that issue. Exploitation requires valid low-privileged credentials but no user interaction or non-default configuration, and the impact is confidentiality-only (CVSS 3.1 base 6.5, C:H/I:N/A:N); no public exploit code or confirmed active exploitation was identified at time of analysis, and the vendor has released a fix in 2026.2.19422.
JetBrains Toolbox App and IntelliJ IDEA expose a certificate-validation weakness in the jetbrainsd daemon that can let an unauthenticated, network-positioned attacker with a forged certificate chaining to compromised eMudhra intermediate CAs impersonate trusted endpoints and read or modify traffic. Affected versions are Toolbox App before 3.9.1 and 3.8.2 and IntelliJ IDEA before 2026.3 and 2026.2.4; exploitation requires both such a certificate and a man-in-the-middle position, so attack complexity is high even though no authentication or user interaction is needed. No public exploit code has been identified at time of analysis, but the 9.0 severity and vendor-reported root cause make prompt patching the priority.
The embedded browser in JetBrains desktop IDEs - IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand, Rider, CLion, DataGrip, RustRover and DataSpell - continues to trust revoked intermediate certificates, so an attacker holding a man-in-the-middle position on an HTTPS connection opened from that browser can present a chain anchored in a revoked eMudhra intermediate and have it accepted, exposing or altering data the user believes is protected by TLS. Reachability is narrow: the victim must actually load an HTTPS resource in the embedded browser, the attacker must be able to intercept that specific TLS session, and a revoked-but-previously-issued eMudhra intermediate must be available, so ordinary coding activity that never touches the embedded browser is not affected. No public exploit identified at time of analysis, exploitation has not been confirmed, and the issue is prioritized for remediation this week rather than as an emergency; JetBrains has published fixed builds for every affected product line.
Remote code execution affects JetBrains TeamCity releases older than 2026.2, 2026.1.4, and 2025.11.8, where a type-whitelist bypass in the build messages protocol lets a serialized payload cross the deserialization trust boundary and execute code in the server process; the flaw carries a CVSS of 9.8 (AV:N/AC:L/PR:N/UI:N, unauthicated per the PR:N vector). There is no public exploit identified at time of analysis, CISA's SSVC records Exploitation as 'none' with Automatable set to 'no', and EPSS is low at 0.38% (31st percentile), though Technical Impact is rated 'total'. JetBrains has released fixes, so the primary risk is unpatched, network-reachable TeamCity servers whose agent-facing build messages channel is exposed beyond trusted build-agent hosts.
Unauthenticated path traversal in the report blob endpoint of JetBrains Datalore before version 2026.2.1 allows a remote attacker who can reach the service to read arbitrary files accessible to the Datalore process. Per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, base 7.5 HIGH), exploitation requires no credentials and no user interaction, making exposure the primary limiting factor: only network-reachable instances below 2026.2.1 are at risk, and the flaw yields confidentiality loss only, with no integrity or availability impact and no code execution on its own. There is no CISA KEV listing and no public exploit code identified at time of analysis, though the low-complexity, unauthenticated nature of the bug makes it an attractive target for opportunistic scanning of internet-facing deployments.
Code execution in JetBrains Junie CLI before 26.8.3 allows an attacker to run arbitrary code via a malicious MCP server configuration embedded in an untrusted project. The victim must open and interact with the project (user interaction required), and local access is necessary, but no privileges are required. No public exploit code has been identified at time of analysis.
SQL injection in JetBrains Exposed before 1.5.1 enables unauthenticated remote attackers to execute arbitrary SQL against downstream applications that pass attacker-controllable, unescaped string arguments into several affected SQL functions. The library itself is not directly exploitable; exploitation requires a hosting application to route untrusted input into the vulnerable function calls, so applications that only pass literals or use parameterized/escaped paths are unaffected. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 9.8) describes a worst-case nominal impact of full confidentiality, integrity, and availability loss; no public exploit code or confirmed active exploitation (CISA KEV) was identified at time of analysis.
Information disclosure in JetBrains TeamCity before 2026.2.1 allows a crafted Git submodule URL to make the server read files from local repositories reachable by the TeamCity service account, exposing source code and other local repository contents. The supplied NVD vector rates this as network-reachable without privileges (PR:N), but our assessment applies a low-privileged precondition (PR:L), because the attacker must be able to influence a submodule URL - typically by committing a malicious .gitmodules file to a repository TeamCity checks out, or by controlling a VCS root - on an instance configured to resolve Git submodules. Impact is confidentiality-only with no integrity or availability effect; EPSS is low (0.62%, 48th percentile), SSVC records no exploitation activity, and no public exploit code has been identified at time of analysis.
Sandbox escape in JetBrains TeamCity's Kotlin DSL configuration mechanism allows an attacker who can supply or modify versioned-settings build configuration code to run arbitrary code on the TeamCity server, breaking out of the DSL evaluation sandbox. The vendor advisory covers TeamCity releases before 2026.1.3 and before 2025.11.7; the CVSS 3.1 vector published with the CVE is a full 10.0 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H), while our independent assessment scores it lower at PR:L because practical exploitation requires the ability to inject Kotlin DSL - realistically project-administration/edit rights in the TeamCity UI or write/commit access to the VCS repository holding the project's versioned settings - and the Kotlin DSL / versioned settings feature must actually be enabled. Risk signals here are genuinely conflicting and should be read carefully: a maximum-severity scope-changing RCE sits alongside a low EPSS of 0.27% (18th percentile), CISA SSVC 'Exploitation: none' and 'Automatable: no', and no public exploit identified at time of analysis, so this looks more like a high-impact but privilege-gated flaw than a broadly wormable one.
Stored XSS in JetBrains YouTrack before 2026.2.19422 allows an authenticated user with content-creation rights to inject malicious Mermaid or LaTeX markup that executes in the browser of any user who views the affected issue, comment, or similar content. The vendor CVSS is 8.1, but the independent assessment lowers this to CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N, reflecting required authentication (unless anonymous/guest issue reporting is enabled), victim interaction, and low confidentiality/integrity impact; signals lean toward moderate real-world priority. No public exploit code or CISA KEV active exploitation was identified at time of analysis.
Privilege escalation in JetBrains YouTrack lets an authenticated holder of an already-high-privilege (non-admin) account raise their effective permissions by abusing the user group links functionality, where a required authorization check is missing (CWE-862). All YouTrack releases before 2026.2.19422 are affected, and the issue is scored CVSS 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) with high confidentiality, integrity, and availability impact once triggered, requiring no user interaction. The PR:H prerequisite meaningfully bounds exposure - anonymous or fully unprivileged users cannot exploit it - and there is no public exploit identified at time of analysis, making this a real but gated finding rather than an urgent fire-drill.
Broken access control in JetBrains YouTrack before 2026.2.19422 allows any authenticated user to add themselves to a project team, gaining unauthorized access to restricted issues. This CVE-2026-103488 has a CVSS score of 7.1 and requires a low-privileged account (PR:L); no public exploit code has been identified at time of analysis. The flaw is classified as CWE-863 (Incorrect Authorization) and affects all YouTrack versions prior to the fixed release 2026.2.19422.
Account takeover in JetBrains YouTrack before 2026.2.19197 is possible because the application accepts a replayed notification signature, allowing an attacker who has captured a legitimate signature to authenticate as the associated account. Every YouTrack instance running an earlier build is affected (CPE cpe:2.3:a:jetbrains:youtrack:*:*:*:*:*:*:*:*), and the root cause is an incorrect-authorization flaw (CWE-863) rather than memory corruption. The practical barrier is signature acquisition: our assessment rates this CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N (high, not the input's 9.8 critical) because exploitation depends on capturing or observing a victim's notification signature rather than a blind unauthenticated request against a default install. No public exploit code and no confirmed active exploitation have been identified (EPSS 0.33%, 24th percentile; CISA SSVC lists Exploitation: none), and JetBrains has released a fix in 2026.2.19197.
Incorrect authorization in JetBrains YouTrack before version 2026.2.19197 allows guest users to strip a workflow action's visibility restriction and then execute that action, altering workflow behavior on the instance. The flaw is network-reachable and rated CVSS 7.5 with a PR:N vector, though practical exposure depends on guest access being enabled on the target instance - a configuration in which the guest context supplies the effective precondition; disabling guest access removes the attack surface entirely. Impact is limited to integrity of workflow actions (no confidentiality or availability effect), there is no public exploit identified at time of analysis, EPSS is low (0.29%, roughly 19th percentile), CISA SSVC records exploitation status as none, and the vendor has released a patch in 2026.2.19197.
Unauthenticated remote attackers can execute arbitrary code in JetBrains YouTrack before 2026.2.19197 by abusing an authorisation bypass in the scripts debugger, a CVSS 3.1 9.8 flaw (PR:N/UI:N, scope unchanged, confidentiality/integrity/availability all High). Real-world urgency is low despite the score: EPSS is 0.36% (28th percentile), no public exploit code has been identified at time of analysis, CISA SSVC reports Exploitation: none, and there is no KEV listing. Exposure depends on deployment - the debugger endpoint being unreachable, behind an authenticating proxy, or disabled materially lowers risk - and a vendor fix is available in 2026.2.19197.
Incorrect authorization in JetBrains YouTrack before 2026.2.18991 lets a user who holds only read-only access to a project overwrite that project's notification templates, an action that should require higher project privileges. The attack is network-reachable and needs no user interaction, but it does require an authenticated account (CVSS PR:L) that already has visibility into the target project, and the effect is scoped to a single project's notification configuration. Severity is moderate (vendor score 7.1; independently assessed impact limited to integrity, with no confidentiality or availability effect), EPSS is low at 0.31% (22nd percentile), CISA SSVC rates exploitation as none and non-automatable, and no public exploit code has been identified at time of analysis. JetBrains has released a fix.
Local code execution in JetBrains IntelliJ IDEA before 2026.2.3 is possible when a developer opens an attacker-supplied untrusted project, because malicious Structural Search script constraints then run within the IDE. The flaw is assessed as CVSS 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), meaning exploitation is local and requires the victim to open the project, but no target authentication is needed and default configurations are affected once that action occurs. No public exploit or confirmed active exploitation was identified at time of analysis; the risk is real but gated by social engineering and the local attack vector.
JetBrains TeamCity versions prior to 2026.2, 2026.1.4, and 2025.11.8 contain a flaw in the password reset mechanism that permits an unauthenticated remote attacker to take over an administrator account. The vulnerability requires a non-trivial condition (AC:H) related to improper validation of input equivalence (CWE-1289), so exploitation is not fully turnkey. No public exploit code has been identified at the time of analysis, but the high impact (C/I/A:H) and remote, unauthenticated attack vector make this a genuinely high-priority flaw despite thin external signals; upgrading to the specified versions removes the vulnerability.
Command execution on Windows-based JetBrains TeamCity servers allows authenticated users with Pipeline Git connection configuration privileges to run arbitrary OS commands via CRLF injection in connection settings, affecting versions before 2026.2, 2026.1.4, and 2025.11.8. The flaw requires authentication (PR:L per CVSS) and only impacts Windows deployments; no public exploit code has been identified at time of analysis. With a CVSS score of 8.8, successful exploitation grants high confidentiality, integrity, and availability impact.
Remote code execution in JetBrains TeamCity (CVE-2026-100253) lets an authenticated attacker with permission to edit a project's versioned settings escape the Kotlin DSL sandbox and execute code on the TeamCity server. Affected versions are those before 2026.2, before 2026.1.4, and before 2025.11.8. No public exploit identified at time of analysis, but this is a genuine high-priority issue rather than an inflated CVSS score because it can compromise a CI/CD server; exploitation requires a low-privileged, non-anonymous account able to supply or commit malicious Kotlin DSL settings.
Host-level code execution in JetBrains IntelliJ IDEA before 2026.2.2 is triggered when a developer opens a malicious project containing a crafted Dev Container configuration, which the IDE proceeds to build without first requesting the standard project-trust confirmation. The flaw (CWE-829) allows untrusted, project-defined container build scripts and Docker commands to execute directly on the developer's host machine, bypassing the IDE's safety gate. JetBrains confirmed the issue and released a fix in version 2026.2.2; no public exploit has been identified at time of analysis.
Local code execution on Remote Development hosts is possible in JetBrains IntelliJ IDEA versions before 2026.2.2 due to the IJent gRPC server running without TLS encryption or any authentication mechanism. The IJent agent, deployed on remote hosts when the Remote Development feature is in use, accepts connections from any local process without requiring credentials, enabling arbitrary command execution under the agent's security context. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Incorrect authorization in JetBrains YouTrack before versions 2025.3.160480 and 2026.1.14047 allows authenticated low-privilege users to modify linked issue entities they lack update permission on by issuing PUT requests directly to link sub-resources. The flaw bypasses YouTrack's permission model at the HTTP method level, enabling integrity violations across project boundaries-reflected in the CVSS scope change (S:C). No public exploit code or active exploitation has been identified at time of analysis.
Unauthorized integrity modification in JetBrains YouTrack before 2026.2.18634 allows any authenticated low-privilege user to alter links on issues they are explicitly prohibited from accessing by exploiting the whiteboard clone operation. The whiteboard clone workflow fails to validate the cloning user's authorization against issues referenced in the board, enabling cross-boundary write access governed by CWE-862 (Missing Authorization). No public exploit has been identified at time of analysis, but the CVSS 7.7 vector (S:C, I:H, PR:L, AC:L) accurately reflects the low barrier to exploitation and the cross-domain integrity impact.
Cross-tenant GitHub App installation token theft in JetBrains YouTrack before 2026.2.18634 lets any authenticated user retrieve GitHub App installation tokens belonging to other tenants due to a shared, non-isolated token cache. The root cause is CWE-488 (Exposure of Data Element to Wrong Session): cached tokens were keyed without tenant-scope isolation. With a stolen installation token, an attacker can authenticate to the GitHub API as the victim organization's GitHub App, gaining access to that organization's repositories, pull requests, issues, and CI/CD integrations; no public exploit has been identified at time of analysis.
Privilege escalation in JetBrains YouTrack before version 2026.2.18634 enables authenticated low-privileged users to alter group memberships without proper server-side authorization validation, effectively granting themselves elevated rights. The flaw (CWE-266, Incorrect Privilege Assignment) means the application trusts client-supplied group membership parameters without enforcing that the requesting user has the authority to make such changes. With a CVSS base score of 8.8 and full C:H/I:H/A:H impact, successful exploitation yields the equivalent of full administrative control over the YouTrack instance.
Privilege escalation to superuser in JetBrains Hub before 2026.2.52442 allows an unauthenticated remote attacker to register a trusted service and thereby obtain full administrative (superuser) control over the identity-management server. Because Hub is the single sign-on and authorization backbone for JetBrains tooling (YouTrack, TeamCity, Upsource), compromise cascades to every application relying on it for authentication. No public exploit has been identified at time of analysis, and the CVE is not listed in CISA KEV.
Missing authorization in JetBrains YouTrack's REST API allows authenticated low-privileged users to access and modify restricted resources via Insecure Direct Object Reference (IDOR). Affected versions span all YouTrack releases prior to 2026.2.18788, 2026.1.14055, and 2025.3.161254 across three active release branches. An attacker with any valid account can enumerate or directly reference object identifiers in REST API calls to read or write data they should not have access to, with high confidentiality and integrity impact per the CVSS vector.
Unauthenticated account takeover in JetBrains YouTrack's Helpdesk feature allows a remote attacker to hijack existing accounts by asserting a victim's email address without proving ownership of it. All YouTrack builds before 2025.3.161254 and 2026.1.14042 are affected. Because the flaw is a trust failure in how Helpdesk associates a self-provided email with an account, exploitation requires no credentials, no user interaction, and works against default configurations where Helpdesk is enabled. No public exploit identified at time of analysis.
Code execution in JetBrains PyCharm before 2026.2.1 is possible through Jupyter MCP (Model Context Protocol) tools that expose critical functions without authentication. The root cause is CWE-306 (Missing Authentication for Critical Function) - the MCP tool surface in PyCharm's Jupyter integration fails to enforce any authentication check before executing code. Any local attacker able to reach the MCP endpoint can trigger arbitrary code execution with the privileges of the running PyCharm process, achieving full confidentiality, integrity, and availability impact. No public exploit code has been identified at time of analysis.
Remote code execution in JetBrains IntelliJ IDEA before version 2026.2.1 is achievable through the Markdown export tool via OS command injection. An attacker who can deliver a crafted Markdown file to a developer and induce them to export it can execute arbitrary operating system commands in the context of the IntelliJ IDEA process. No public exploit or CISA KEV listing has been identified at time of analysis, but the CWE-78 root cause and full C/H/I/H/A:H impact make this a meaningful risk for development workstation environments.
Unauthorized project transfer between organizations in JetBrains YouTrack before version 2026.2.17917 exposes high-severity access control failure affecting any multi-tenant or multi-organization deployment. Any authenticated low-privileged user can transfer projects across organizational boundaries without holding the necessary authorization, resulting in high confidentiality and integrity impact against affected projects and their data. No public exploit or CISA KEV listing is identified at time of analysis, but the low attack complexity and authentication-only requirement make this straightforwardly exploitable by any active YouTrack user.
Stored cross-site scripting in JetBrains YouTrack before 2026.2.18068 allows remote attackers to persist malicious script payloads via the language label field of fenced code blocks in issues or comments. When any authenticated user views the affected content, the injected script executes within the YouTrack application origin - a scope change that enables session token theft, credential harvesting, or unauthorized actions on behalf of the victim (CVSS C:H). No public exploit code has been identified at time of analysis, but the low-complexity network vector makes this straightforward to weaponize once a reporter or contributor role is obtained.
Unauthenticated database backup disclosure in JetBrains YouTrack before 2025.3.156085, 2026.1.13913, and 2026.2.18112 allows a remote attacker to abuse a shared draft signature to download full database backups without any credentials. Because backups typically contain issue data, user records, and secrets, this is a high-impact confidentiality exposure. No public exploit has been identified at time of analysis and it is not listed in CISA KEV, but the CVSS 9.1 rating and trivial network exploitability make it a priority patch.
Missing authorization on the mailbox endpoint in JetBrains YouTrack enables any authenticated user to delete arbitrary entities across the platform, regardless of ownership or role. Affected versions span three active release branches: all releases prior to 2025.3.156085, 2026.1.13914, and 2026.2.18095. The CVSS 3.1 score of 8.1 (High) reflects high integrity and availability impact with a low-privilege authentication bar; no public exploit code or confirmed active exploitation (CISA KEV) has been identified at time of analysis.
Remote code execution in JetBrains TeamCity before 2026.1.3 and 2025.11.7 allows unauthenticated attackers to execute arbitrary code via deserialization of untrusted data in the agent polling protocol. The vulnerability carries a CVSS 9.8 score and poses immediate risk to any exposed TeamCity instance. No public exploit or active exploitation has been confirmed at the time of analysis.
Code execution in JetBrains TeamCity (before 2026.1.2 and 2025.11.6) allows a privileged user to run arbitrary code through Git VCS root configuration, mapping to CWE-94 code injection. The CVSS 3.1 score of 9.1 reflects a scope-changing flaw (S:C) that requires high privileges (PR:H) but no user interaction, meaning an attacker with rights to configure VCS roots can escalate into code execution on the CI/CD infrastructure. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV; it was self-reported by JetBrains.
Arbitrary code execution in JetBrains PyCharm before 2026.1.4 and 2026.2 lets an attacker who supplies a crafted project achieve code execution when a victim opens that untrusted project in the IDE. PyCharm auto-selects or trusts a Python executable bundled or referenced by the project, so merely opening the malicious project runs attacker-controlled code with the user's privileges. No public exploit identified at time of analysis, and it is not listed in CISA KEV, but the reporter is JetBrains itself and a vendor patch is available.
Remote code execution in JetBrains TeamCity before 2026.1.2 and 2025.11.6 allows an attacker to escape the Kotlin DSL sandbox used to define build configurations-as-code and run arbitrary code in the context of the CI server. Because TeamCity servers hold VCS credentials, deployment keys, and build artifacts, a successful escape effectively compromises the entire build pipeline and downstream software supply chain. There is no public exploit identified at time of analysis, and the flaw is not listed in CISA KEV; EPSS is low at 0.40% (33rd percentile).
Arbitrary code injection in IntelliJ IDEA before version 2026.2 allows remote attackers to execute arbitrary code by convincing a developer to open a malicious UI Designer form file, leading to full system compromise. No active exploitation or public exploit code has been reported, but a critical-severity vendor patch is available.
Unauthorized file access in JetBrains IntelliJ IDEA before 2026.2 allows remote attackers to read files they should not be able to reach during a Remote Development session, bypassing intended authorization controls (CWE-862). The high CVSS score (8.6) reflects a scope-changed confidentiality impact, meaning the exposure can extend beyond the vulnerable component to the host system serving the remote session. There is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV.
Unauthorized settings modification in JetBrains IntelliJ IDEA before 2026.2 allows attackers to alter configuration within an active Remote Development session without proper authorization, tagged by the vendor as an authentication bypass. Because Remote Development connects a local client to a remote backend IDE, tampering with settings can subvert the security boundary between client and host. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV, but the vendor-assigned CVSS of 10.0 with scope change signals maximum theoretical severity.
Authentication bypass via unauthorized input injection in JetBrains IntelliJ IDEA before 2026.2 allows remote attackers to inject unauthorized input into an active Remote Development session, undermining the trust boundary between client and backend host. Because the flaw stems from missing authentication (CWE-306) on a Remote Development channel and carries a maximal CVSS 10.0 with scope change, a successful attacker can influence code, files, or execution on the remote workspace. There is no public exploit identified at time of analysis, but the ceiling severity warrants prompt patching.
Arbitrary code execution in JetBrains IntelliJ IDEA before 2026.2 allows a malicious project to run attacker-controlled code before the user grants project trust, by abusing development container (dev container) configuration that the IDE processes prematurely. Any developer who opens or clones a crafted repository is affected, since code executes ahead of the trust prompt that is supposed to gate untrusted projects. There is no public exploit identified at time of analysis and the flaw is not in CISA KEV, but the local, low-complexity nature and RCE tagging make it a meaningful supply-chain-of-code risk.
Arbitrary code execution in JetBrains PhpStorm before 2026.2 allows a malicious project to run attacker-controlled code through the configured interpreter before the developer grants project trust, bypassing the IDE's trust-gate safeguard. Tagged as RCE by the reporting vendor (JetBrains), the flaw carries a CVSS 8.4 and requires a developer to open a crafted project locally. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Arbitrary code execution in JetBrains PhpStorm before 2026.2 allows a malicious project to run code through project tooling before the user grants project trust, bypassing the IDE's trust-boundary safeguard. Reported by JetBrains itself (cve@jetbrains.com) and tagged RCE, it lets an attacker who tricks a developer into opening a crafted repository execute code in the developer's context. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the local high-impact (C:H/I:H/A:H) nature makes it relevant for developer-workstation threat models.
Arbitrary code execution in JetBrains WebStorm before 2026.2 allows a malicious project to run attacker-controlled code on a developer's machine by supplying a crafted linter configuration that the IDE trusts and executes when the project is opened. Reported by JetBrains itself (cve@jetbrains.com) and tagged RCE, the flaw carries CVSS 7.8 (high) with a local vector and required user interaction. There is no public exploit identified at time of analysis and no CISA KEV listing, indicating no confirmed active exploitation to date.
Arbitrary code execution in JetBrains WebStorm before 2026.2 allows a malicious project to run code through the configured Node.js interpreter before the developer grants the project the required trust. Any developer who opens (or clones and opens) an attacker-supplied project is affected, since the IDE's trust prompt - designed to gate execution - is bypassed. No public exploit has been identified and it is not in CISA KEV, but the RCE and Node.js tags plus a local, no-privilege CVSS 8.4 vector make this a meaningful supply-chain/developer-workstation risk.
Arbitrary code execution in JetBrains WebStorm before 2026.2 lets a malicious project run code on a developer's machine before the IDE's project-trust prompt is ever answered, by abusing project-local package-manager tooling that the IDE invokes automatically. Because execution happens prior to the trust gate, the safety boundary meant to protect users who merely open an untrusted repository is bypassed. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the RCE tag and full C/I/A impact make this a meaningful developer-workstation risk.
Arbitrary code execution in JetBrains WebStorm before 2026.2 allows a malicious project to run code via project-local linter tooling before the user grants project trust, bypassing the IDE's Trust Projects safeguard. The flaw (CWE-829) affects developers who open or import a crafted repository; no public exploit or active exploitation has been identified, and no EPSS/KEV signal is present in the provided data. Fixed in WebStorm 2026.2.
Arbitrary code execution in JetBrains GoLand IDE before version 2026.2 allows a malicious project to run attacker-controlled code via the configured Go SDK before the user grants project trust, bypassing the trust-boundary safeguard meant to gate execution. Any developer who merely opens a crafted repository (for example, cloned from a public source) can be compromised without ever clicking 'Trust Project'. This is a CWE-94 code injection weakness with a CVSS 7.8; no public exploit code or active exploitation has been identified at time of analysis.
Arbitrary code execution in JetBrains GoLand before 2026.2 allows a malicious Go project to run attacker-controlled code through the Go Modules integration before the developer explicitly grants project trust. Because the trust prompt is meant to be the safeguard against exactly this, opening or previewing a crafted repository is sufficient for compromise. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Authentication bypass in JetBrains YouTrack allows attackers to obtain full administrative access by leveraging a direct-database-access code path, per CWE-306 (missing authentication for a critical function). All self-hosted YouTrack builds prior to the 2026.1.13757 / 2025.3.148033 / 2025.2.148048 / 2025.1.148120 / 2024.3.148430 / 2024.2.148429 fix trains are affected, and JetBrains rates it CVSS 10.0. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the maximal severity score and administrative impact make prompt patching essential.
Improper permission enforcement in JetBrains TeamCity before 2026.1.2 lets authenticated low-privilege users modify CI/CD pipelines they should not control, undermining build integrity and potentially exposing pipeline secrets. Reported by JetBrains itself and carrying a CVSS 8.1, the flaw is a missing-authorization issue (CWE-862) rather than a memory-safety bug. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Arbitrary file access in JetBrains TeamCity before 2026.1.2 lets an authenticated user abuse the Perforce (P4) VCS integration to read files outside intended boundaries on the TeamCity server host. The flaw (CWE-73, external control of file name or path) was self-reported by JetBrains and is fixed in 2026.1.2; no public exploit identified at time of analysis, and it is not listed in CISA KEV. With PR:L in the CVSS vector, exploitation requires a low-privilege account that can define or influence a Perforce VCS root, making it a realistic post-authentication threat on shared CI servers.
Code execution via path traversal in JetBrains IntelliJ IDEA before 2026.1.4 and 2026.2 lets an attacker abuse improper sanitization of the project workspace ID to write or reference files outside the intended workspace directory, culminating in arbitrary code execution. The flaw was self-reported by JetBrains and a fix is available; no public exploit has been identified at time of analysis. The NVD-assigned CVSS of 9.8 (network, no privileges, no user interaction) is notably high for a desktop IDE flaw and warrants scrutiny given that IDE project-handling bugs typically require a victim to open a crafted project.
Remote code execution in JetBrains Kotlin before 2.4.20 stems from unsafe deserialization (CWE-502) of build cache metadata, allowing an attacker who can influence cached build artifacts to execute arbitrary code during a build. The flaw carries a CVSS 9.8 (C:H/I:H/A:H) rating, but there is no public exploit identified at time of analysis and EPSS is very low (0.11%, 2nd percentile), and CISA SSVC marks exploitation as 'none'. JetBrains, who reported the issue, has released a fixed version (2.4.20).
Prototype pollution in JetBrains YouTrack's websandbox bridge (all versions before 2026.2.16593) lets an attacker who can reach the sandbox boundary corrupt JavaScript Object.prototype, potentially escaping the sandbox or disclosing information. The flaw was internally reported by JetBrains and classed as CWE-1321; it carries a vendor-published CVSS of 9.8, but no public exploit has been identified at time of analysis and EPSS rates exploitation probability low at 0.40% (32nd percentile).
Improper authorization in JetBrains YouTrack's app configurations endpoint lets remote attackers modify project settings they should not be permitted to change, affecting all versions before 2026.2.16593. The flaw (CWE-862, Missing Authorization) impacts integrity only - no data disclosure or service disruption - and was self-reported by JetBrains with a patch already available. No public exploit identified at time of analysis, and EPSS exploitation probability is low (0.16%, 5th percentile).
Information disclosure in JetBrains YouTrack before 2026.2.16593 allows remote attackers to read other users' private data through a missing authorization check on the comment templates endpoint. The flaw is unauthenticated and network-reachable per the CVSS vector (PR:N), exposing confidential information without any user interaction. There is no public exploit identified at time of analysis, and the EPSS probability is low (0.16%, 6th percentile).
Authentication bypass in JetBrains Hub (the identity and account-management server behind TeamCity, YouTrack, and other JetBrains tools) lets an actor obtain administrative access by going through direct database access, per JetBrains' own advisory. Classified under CWE-306 (Missing Authentication for a Critical Function) and vendor-scored CVSS 9.8, it affects all builds before the fixed 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, and 2024.2.148429 releases. There is no public exploit identified at time of analysis and the EPSS probability is low (0.44%, 35th percentile), but full administrative compromise is the stated technical impact.
Privilege escalation in JetBrains Hub (versions prior to 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, and 2024.2.148429) allows an authenticated attacker to attach additional authentication details to existing accounts, enabling unauthorized access and elevation of privileges. The flaw, self-reported by JetBrains and patched, carries a CVSS 8.8 with high impact to confidentiality, integrity, and availability; no public exploit is identified at time of analysis and EPSS exploitation probability is low (0.41%).
Account takeover in JetBrains Hub is possible through predictable restore codes, affecting all versions prior to 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, and 2024.2.148429. Remote unauthenticated attackers can guess or predict the restore codes used for account recovery, enabling them to seize control of arbitrary user accounts. No public exploit identified at time of analysis, but the CVSS 9.8 rating reflects the high impact of full account compromise across an identity management platform.
Remote code execution in JetBrains GoLand before 2026.1.3 lets an attacker run arbitrary code on a developer's machine when the victim opens a maliciously crafted project whose configuration is untrusted. The flaw, reported by JetBrains itself and assigned CVSS 8.8 with high confidentiality, integrity, and availability impact, requires the user to open the booby-trapped project (UI:R) but no prior authentication on the IDE. There is no public exploit identified at time of analysis, and the EPSS probability is low at 0.21% (11th percentile).
Code execution in JetBrains IntelliJ IDEA prior to 2026.1 is achievable through server-side template injection (SSTI) in the built-in Copyright plugin, which lets an attacker embed executable template expressions into copyright profile configurations. Because the CVSS vector is local with required user interaction (AV:L/UI:R), exploitation hinges on a developer opening or importing a malicious project/profile that triggers the injected template, running with the victim's privileges. There is no public exploit identified at time of analysis and EPSS is 0.00%, consistent with the SSVC 'exploitation: none' assessment.
Information disclosure in JetBrains TeamCity prior to version 2026.1 allows authenticated low-privilege users to read sensitive build configuration parameters they should not have access to due to missing authorization checks. The flaw carries a CVSS 7.6 score driven by high confidentiality impact on a network-reachable CI/CD server, though no public exploit identified at time of analysis. Because TeamCity build parameters frequently contain secrets such as deployment credentials, signing keys, and API tokens, the disclosure can cascade into broader compromise of downstream systems.
Remote code execution in JetBrains TeamCity before 2026.1 allows an authenticated user with project/build configuration rights to run arbitrary code on the CI server by tampering with Perforce (P4) connection settings. The flaw stems from unsafe handling of version-control connection parameters (CWE-88, argument injection), and while it carries a high CVSS of 8.8 with total technical impact, there is no public exploit identified at time of analysis and its EPSS probability is 0.00%.
Server-side request forgery in JetBrains TeamCity versions prior to 2026.1 and 2025.11.5 allows remote unauthenticated attackers to coerce the build server into issuing arbitrary outbound HTTP requests through the build status functionality. The CVSS 7.5 score (C:H/I:N/A:N) reflects high-impact disclosure of internal data without integrity or availability effects, and no public exploit is identified at time of analysis.
Reflected cross-site scripting in JetBrains TeamCity before 2026.1.1 allows an attacker to inject arbitrary script into a victim's browser via the keyword filter parameter, executing in the context of the TeamCity web UI. Because TeamCity is a CI/CD orchestration server holding build secrets and privileged sessions, a tricked authenticated user (e.g. an administrator) clicking a crafted link can have their session or sensitive data compromised. There is no public exploit identified at time of analysis, and the EPSS probability is very low (0.01%).
Information disclosure in JetBrains YouTrack before 2026.1.13162 allows remote unauthenticated attackers to obtain sensitive data through fetchApp requests. The flaw exposes confidential information without requiring authentication or user interaction, but carries no integrity or availability impact. There is no public exploit identified at time of analysis, and the EPSS score of 0.00% reflects no observed exploitation activity.
Command execution in JetBrains IntelliJ IDEA before 2026.1.1 allows a holder of the low-privileged guest user account to run operating-system commands it should not be authorized to invoke, effectively bypassing intended authorization boundaries. The flaw carries a CVSS 8.8 rating with total technical impact, but there is no public exploit identified at time of analysis and the EPSS probability is 0.00%, indicating no observed or predicted mass exploitation. It was reported by JetBrains and is fixed in 2026.1.1.
Command injection in JetBrains IntelliJ IDEA before 2026.1.1 allows attackers to execute arbitrary OS commands by abusing the filename completion feature when a developer interacts with a crafted filename. The flaw is locally exploitable with user interaction required and has high impact on confidentiality, integrity, and availability. No public exploit identified at time of analysis and the issue is not listed in CISA KEV.
JetBrains TeamCity before 2026.1 and 2025.11.5 can expose its server API to unauthorised access, allowing remote attackers to read data the API was meant to protect, with confidentiality-only impact and no effect on integrity or availability. Authentication requirements are not confirmed from available data: the description refers to 'authenticated users' while the published CVSS vector encodes PR:N, so the assessed vector uses PR:L and the precondition remains unresolved. No public exploit was identified at time of analysis; EPSS is 0.00%, CISA SSVC records no exploitation and no automatable path, and the vendor has released fixes.
Local file disclosure in IntelliJ IDEA's built-in web server allows remote attackers to read arbitrary local files via network requests requiring user interaction. JetBrains IDEA versions before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, and 2026.1.1 are affected. The vulnerability achieves scope change (CVSS S:C) enabling cross-context information theft with high confidentiality impact but no integrity or availability damage. No active exploitation (KEV-absent) or public POC identified at time of analysis, though vendor disclosure suggests controlled remediation timeline.
Command execution in JetBrains Junie before version 252.549.29 allows local attackers to execute arbitrary commands by crafting malicious project files, requiring user interaction to open the file. The vulnerability affects all Junie versions prior to the patched release and exploits unsafe handling of project file content without proper sanitization.
Sandbox escape in JetBrains YouTrack before 2025.3.131383 allows high-privileged users to execute arbitrary code on the server. The vulnerability affects all YouTrack versions prior to 2025.3.131383 and is classified as both an authentication bypass and server-side template injection (SSTI). EPSS scoring indicates 0% exploitation probability with no evidence of active exploitation or public POCs. Despite a CVSS score of 7.2, the requirement for high-level administrative privileges significantly constrains real-world attack surface to insider threats or compromised admin accounts.
Authenticated users in JetBrains YouTrack versions prior to 2025.3.121962 can bypass authorization controls to access the app permissions endpoint, potentially allowing privilege escalation or unauthorized modification of application settings. This vulnerability requires valid login credentials but has no complexity requirements, enabling attackers with low-level access to gain high-impact capabilities including confidentiality and integrity violations. No patch is currently available.
JetBrains Hub before 2025.3.119807 has an authentication bypass allowing administrative actions without proper credentials.
In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible [CVSS 8.2 HIGH]
Path traversal in JetBrains TeamCity before 2023.11.4 enables remote attackers to perform a limited set of administrative actions by bypassing authentication controls on specific endpoints. This vulnerability is confirmed actively exploited (CISA KEV) with publicly available exploit code, and carries an EPSS score of 82.47% (99th percentile), placing it among the highest-probability exploitation targets currently tracked.
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Stored cross-site scripting (XSS) in JetBrains TeamCity's classic build log allows an authenticated user with permission to inject content into build output to execute arbitrary JavaScript in the browser of another user who views the affected log. The flaw affects TeamCity versions before 2026.2, 2026.1.4, and 2025.11.8, and exploitation requires both authentication and victim interaction, making it a moderate-severity risk (vendor CVSS 6.7). No public exploit code has been identified at time of analysis.
Stored cross-site scripting (XSS) in JetBrains TeamCity versions before 2026.2, 2026.1.4, and 2025.11.8 allows an authenticated low-privilege attacker to inject malicious scripts into the classic project overview page, which execute in the context of any user-including higher-privileged administrators-who navigates to that view. The vulnerability requires the attacker to have a valid TeamCity account with rights to store content that renders in the classic overview, and a privileged victim must actively open that legacy view; no public exploit code has been identified at time of analysis. The independent assessment rates the overall risk as conditional rather than critical, noting that instances not exposing the classic overview to low-privilege contributors are not realistically exploitable.
Missing authorization in the mail rules feature of JetBrains YouTrack allows an authenticated user holding project-administrator privileges to execute issue commands against projects they do not administer. The flaw (CWE-862) is reachable remotely over the network with low attack complexity, but it is privilege-gated: the attacker must already hold project-admin rights and the instance must process mail rules, so exposure is concentrated in multi-team or multi-tenant deployments where project administration is delegated. Impact is a serious integrity and confidentiality concern for affected projects (CVSS 6.5), but there is no public exploit identified at time of analysis and no indication of active exploitation. Fixed builds are available in the 2026.2 and 2026.3 release lines.
Server-side request forgery in JetBrains YouTrack before 2026.2.19422 allows an authenticated user holding administrative or project-level privileges to abuse the GitHub VCS integration and coerce the YouTrack server into issuing requests to destinations of the attacker's choosing. With a CVSS 3.1 base score of 5.5 (AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N), the impact is bounded to limited confidentiality and integrity loss with a scope change, and the high privilege prerequisite is the dominant limiting factor - this is a moderate-severity, low-real-world-priority issue rather than an anonymous or default-configuration exposure. At the time of analysis there is no confirmed active exploitation (not in CISA KEV) and no public exploit identified at time of analysis.
Authenticated users of JetBrains YouTrack before version 2026.2.19422 can read notifications belonging to other users by directly referencing inbox thread identifiers that lack a proper per-user ownership check. The flaw is a classic insecure direct object reference (CWE-639) reachable over the network with low complexity and no user interaction, but it requires a valid low-privilege account, so it is not exploitable by unauthenticated outsiders. Impact is limited to confidentiality - disclosure of other users' notification contents - with no evidence of modification, service disruption, active exploitation, or publicly available exploit code at time of analysis; EPSS and KEV data were not provided, and the vendor has released a fix.
Authenticated users on JetBrains YouTrack instances running versions prior to 2026.2.19422 can trigger unauthorized reloads of translation catalogs because the endpoint enforcing that operation lacks a proper authorization check (CWE-862). Exploitation is bounded by the CVSS vector (AV:N/AC:L/PR:L/UI:N) - a valid low-privileged account is required, and the impact is confined to availability (A:L) with no data disclosure or modification (C:N/I:N). No public exploit code has been identified at time of analysis and there is no evidence of confirmed active exploitation; the overall real-world risk is low, and the vendor has shipped a fixed release.
Privilege escalation in JetBrains YouTrack before 2026.2.19422 allows an authenticated attacker with pre-existing elevated privileges (CVSS PR:H) to abuse user-group membership changes and gain higher privileges, though success requires a specific group-configuration state (AC:H). The flaw is network-reachable (AV:N) and needs no user interaction (UI:N), but the high privilege and configuration prerequisites sharply narrow realistic risk to insiders or holders of a compromised privileged account; no public exploit identified at time of analysis. Vendor CVSS 6.6 Medium and CWE-266 (Incorrect Privilege Assignment) match the assessed vector and the need to manipulate group membership under constrained conditions.
Denial of service in JetBrains YouTrack instances running versions before 2026.2.19422 lets an authenticated user who can upload attachments hang or crash the server by submitting a crafted PSD file that drives the image-processing path into an infinite loop. The attack is network-reachable and needs no victim interaction, but it requires a valid low-privileged account (PR:L), so it is not exploitable by fully anonymous visitors unless the instance permits self-registration or guest attachment uploads; impact is confined to availability, with no confidentiality or integrity loss. No public exploit code has been identified at time of analysis, and the issue is not listed in CISA KEV.
Authorization bypass in JetBrains YouTrack before 2026.2.19422 allows an authenticated user with only low privileges to read the activity history of restricted issues they are not authorized to view. The root cause is an insecure direct object reference in the issue activities API, where the endpoint resolves a caller-supplied issue identifier without verifying that the caller holds read access to that issue. Exploitation requires valid low-privileged credentials but no user interaction or non-default configuration, and the impact is confidentiality-only (CVSS 3.1 base 6.5, C:H/I:N/A:N); no public exploit code or confirmed active exploitation was identified at time of analysis, and the vendor has released a fix in 2026.2.19422.