In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects
Metrics
Affected Vendors & Products
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://www.jetbrains.com/privacy-security/issues-fixed/ |
|
History
Fri, 06 Nov 2026 18:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Jetbrains
Jetbrains intellij Idea |
|
| Vendors & Products |
Jetbrains
Jetbrains intellij Idea |
Fri, 06 Nov 2026 16:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects | |
| Weaknesses | CWE-23 | |
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: JetBrains
Published:
Updated: 2026-11-06T16:48:06.832Z
Reserved: 2026-11-06T16:05:44.892Z
Link: CVE-2026-123845
No data.
Status : Received
Published: 2026-11-06T17:17:23.280
Modified: 2026-11-06T17:17:23.280
Link: CVE-2026-123845
No data.
OpenCVE Enrichment
Updated: 2026-11-06T17:45:05Z
Weaknesses