CVE Field Guide
About Us
CVE-2026-49367
PUBLISHED
Assigner:
JetBrains
Reserved:
29.05.2026
Published:
29.05.2026
Updated:
30.05.2026
In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account
Metrics
CVSS 3.1
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS Score:
8
CVSS score
8
Attack Vector
Network
Scope
Unchanged
Attack Complexity
Low
Confidentiality Impact
High
Privileges Required
Low
Integrity Impact
High
User Interaction
Required
Availability Impact
High
CVSS 3.1
Product Status
Vendor
JetBrains
Product
IntelliJ IDEA
Versions
Default:
unaffected
affected from 0 to 2026.1.1 (excl.)
References
https://www.jetbrains.com/privacy-security/issues-fixed/
Problem Types
CWE-862