CVE-2026-123307: SSRF

Published Nov 6, 2026

Updated

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 unauthenticated connection to an arbitrary host via run configurations was possible

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade JetBrains IntelliJ IDEA to a version that resolves this vulnerability.
Fixed in 2026.3

Event History

Nov 6, 2026

CVE Published

via MITRE·10:28 AM

Data Sourced

via MITRE·10:28 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker does not need to authenticate, but exploitation requires user interaction and high attack complexity. The affected behavior is tied to run configurations that can initiate a connection to an arbitrary host.

What security impact could successful exploitation have?

Successful exploitation may result in high confidentiality and integrity impact. The provided scoring indicates no availability impact.

Which versions need remediation?

JetBrains IntelliJ IDEA versions before 2026.3 are affected. Version 2026.2.4 is identified as a fixed version.

CVE-2026-123307: SSRF

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What security impact could successful exploitation have?

Which versions need remediation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What security impact could successful exploitation have?

Which versions need remediation?