CVE-2026-123839: Security vulnerability

Published Nov 6, 2026

Updated

In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Development port forwarding model

Event History

Nov 6, 2026

CVE Published

via MITRE·04:10 PM

Data Sourced

via MITRE·04:10 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeakness

IntelliJ IDEA versions before 2026.3 are affected when the Remote Development port forwarding model is in use.

The issue involves causing arbitrary URLs to be opened through the Remote Development port forwarding model without a confirmation prompt.

Check the IntelliJ IDEA version and whether Remote Development port forwarding is used. Versions before 2026.3 meet the affected version condition.