VYPR
← All advisories
High severity7.4NVD Advisory· Published Apr 30, 2026· Updated Jun 17, 2026

CVE-2026-41882

CVE-2026-41882

Description

In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 reading arbitrary local files was possible via built-in web server

Affected products

6
  • Jetbrains/Intellij Idea6 versions
    cpe:2.3:a:jetbrains:intellij_idea:2024.3.7.1:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:jetbrains:intellij_idea:2024.3.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:jetbrains:intellij_idea:2025.1.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:jetbrains:intellij_idea:2025.2.6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:jetbrains:intellij_idea:2025.3.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:jetbrains:intellij_idea:2026.1.1:*:*:*:*:*:*:*
    • (no CPE)range: < 2024.3.7.1, < 2025.1.7.1, < 2025.2.6.2, < 2025.3.4.1, < 2026.1.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.