AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

JetBrainsCVE-2026-86502

JetBrains IntelliJ IDEA: remote code execution

JetBrains

CVE-2026-86502 · Published Sep 7, 2026 · updated Sep 9, 2026

High8.4
Fix: upgrade to 2026.2.2 or later
JetBrains advisory

In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts

Affected versions

PackageAffectedFixed in
IntelliJ IDEA
Product
< 2026.2.22026.2.2
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-306

More JetBrains advisories

All JetBrains
Low 3.3Sep 7JetBrains IntelliJ IDEA: information disclosureCVE-2026-86505fixed in 2026.2.2Medium 5.9Sep 7JetBrains GoLand: missing authenticationCVE-2026-86506fixed in 2026.2.2.1Medium 6.8Sep 7JetBrains YouTrack: information disclosureCVE-2026-86497fixed in 2026.2.18769High 7.7Sep 7JetBrains YouTrack: improper authorizationCVE-2026-86498fixed in 2025.3.160480 +1Medium 4.3Sep 7JetBrains YouTrack: missing authorizationCVE-2026-86499fixed in 2026.1.14047Medium 5.5Sep 7In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user...CVE-2026-86500fixed in 2026.1.14047