CVE-2026-123842: Security vulnerability

Published Nov 6, 2026

Updated

In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives

Event History

Nov 6, 2026

CVE Published

via MITRE·04:10 PM

Data Sourced

via MITRE·04:10 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

Users of JetBrains IntelliJ IDEA versions before 2026.3 are affected when extracting plugin archives that can contain symlinks.

What does an attacker need to exploit the vulnerability?

The issue is triggered through extraction of a plugin archive containing symlinks. The provided information does not specify how an attacker would cause a target to obtain or extract such an archive.

What is the recommended remediation?

Update IntelliJ IDEA to version 2026.3 or later. The issue is reported as affecting versions before 2026.3.

CVE-2026-123842: Security vulnerability

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit the vulnerability?

What is the recommended remediation?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit the vulnerability?

What is the recommended remediation?