CVE-2026-49366

—

CVSS 3.1

7.8 high

EPSS

<1%p38

Published

May 29, 2026 (May 29, 2026)

Modified

Jul 22, 2026

Description

In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion

Vendors: jetbrains
Products: intellij idea
Weakness: CWE-78
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.