CVE-2026-49366: JetBrains Intellij Idea

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion

Affected products

• JetBrains Intellij Idea: before 2026.1.1 (fixed in 2026.1.1)

Published 2026-05-29. Last modified 2026-07-22.