CVE-2026-75052CWE-77command-injection

CVE-2026-75052

Low · published August 17, 2026

CVSS v3.1
3.6
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects

The record
Technical detail
CVSS v3.1
3.6 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00175 · 6.7th percentile
Weakness
CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Published
2026-08-17T20:17Z
Affected products (1)
ProductVersionsFixed in
jetbrains/intellij_idea< 2026.2.12026.2.1
References (1)
https://www.jetbrains.com/privacy-security/issues-fixed/ · [email protected]
EPSS history
Timeline
  • 17 AUG 15:54Z
    In JetBrains IntelliJ IDEA before 2026.2.1 command execution via crafted Markdown preview content was possible in trusted projects
    cvelistv5