CVE-2026-64804: JetBrains Webstorm

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local linter tooling

Affected products

• JetBrains Webstorm: before 2026.2.0 (fixed in 2026.2.0)

Published 2026-07-23. Last modified 2026-07-28.