CVE-2026-49382CWE-1336

In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin

Medium · published May 29, 2026

CVSS v3.1
4.5
EPSS
0%
Percentile
7.6
In the wild
Unconfirmed
What it is

In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin

The record
Technical detail
CVSS v3.1
4.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00184 · 7.6th percentile
Weakness
CWE-1336 · Improper Neutralization of Special Elements Used in a Template Engine
Published
2026-05-29T18:15Z
EPSS history
Timeline
  • 29 MAY 18:15Z
    In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin
    cvelistv5