High severity7.8NVD Advisory· Published May 29, 2026· Updated Jul 22, 2026
CVE-2026-49366
CVE-2026-49366
Description
In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion
Affected products
3<2026.1.1+ 1 more
- (no CPE)range: <2026.1.1
- cpe:2.3:a:jetbrains:intellij_idea:*:*:*:*:*:*:*:*range: <2026.1.1
- Range: <2026.1.1
Patches
Vulnerability mechanics
References
1- www.jetbrains.com/privacy-security/issues-fixed/nvdVendor Advisory
News mentions
1- JetBrains Fixes Critical IntelliJ IDEA Code Execution Flaw and Four TeamCity VulnerabilitiesCyber Security News · Jul 24, 2026