CVE-2026-123843: Security vulnerability

Published Nov 6, 2026

Updated

In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade JetBrains IntelliJ IDEA to a version that resolves this vulnerability.
Fixed in 2026.3

Nov 6, 2026

CVE Published

via MITRE·04:10 PM

Data Sourced

via MITRE·04:10 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeakness

JetBrains IntelliJ IDEA versions before 2026.3 are affected when untrusted projects are opened.

An attacker would need to cause a user to open an untrusted project in a vulnerable IntelliJ IDEA version.

Update IntelliJ IDEA to version 2026.3 or later. Until updating, avoid opening projects from untrusted sources.