CVE-2026-41882

JetBrains / IntelliJ IDEA PUBLISHED

Description (CNA)

In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 reading arbitrary local files was possible via built-in web server

Affected (CNA)

Vendor / product	Versions
JetBrains / IntelliJ IDEA	affected 0 before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1

CWE

CWE-59

References

https://www.jetbrains.com/privacy-security/issues-fixed/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.