AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

JetBrainsCVE-2026-59792

JetBrains IntelliJ IDEA: code execution via path traversal

JetBrains

CVE-2026-59792 · Published Jul 10, 2026 · updated Jul 14, 2026

Critical9.6
Fix: upgrade to 2026.1.4 or later (2 fixed versions below)
JetBrains advisory

In JetBrains IntelliJ IDEA before 2026.1.4,

2026.2 code execution via path traversal in project workspace ID handling was possible

Affected versions

PackageAffectedFixed in
IntelliJ IDEA
Product
< 2026.1.4, 2026.22026.1.4, 2026.2
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-23

More JetBrains advisories

All JetBrains
Low 3.5Jul 10JetBrains YouTrack: cross-site scriptingCVE-2026-61492fixed in 2026.2.17394Low 3.5Jul 10JetBrains YouTrack: clickjackingCVE-2026-59791fixed in 2026.2.17012High 8.8Jul 10In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via...CVE-2026-59793fixed in 2026.1.2High 7.3Jul 10JetBrains TeamCity: cross-site scriptingCVE-2026-59794fixed in 2026.1.2High 8.1Jul 10JetBrains TeamCity: cross-site scriptingCVE-2026-59795fixed in 2026.1.2High 8.1Jul 10JetBrains TeamCity: insecure permissionsCVE-2026-59796fixed in 2026.1.2