CVE-2026-41882: JetBrains Intellij Idea

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 reading arbitrary local files was possible via built-in web server

Affected products

• JetBrains Intellij Idea: version 2024.3.7.1 only; version 2025.1.7.1 only; version 2025.2.6.2 only; version 2025.3.4.1 only; version 2026.1.1 only

Published 2026-04-30. Last modified 2026-06-17.