← All advisories

High severity8.4NVD Advisory· Published Jul 23, 2026· Updated Jul 28, 2026

CVE-2026-64806

CVE-2026-64806

Description

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpreter

Affected products

2

Jetbrains/WebStorm2 versions
cpe:2.3:a:jetbrains:webstorm:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:jetbrains:webstorm:*:*:*:*:*:*:*:*range: <2026.2.0
- (no CPE)range: <2026.2

Patches

Vulnerability mechanics

References

1

www.jetbrains.com/privacy-security/issues-fixed/nvdVendor Advisory

News mentions

0

No linked articles in our index yet.