CVE-2026-123849: Security vulnerability

Published Nov 6, 2026

Updated

In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers

Event History

Nov 6, 2026

CVE Published

via MITRE·04:10 PM

Data Sourced

via MITRE·04:10 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which IntelliJ IDEA installations should be prioritized for remediation?

Prioritize installations running a version before 2026.3 that may open untrusted projects and use Terraform File Watchers.

How can I determine whether an installation is potentially exposed?

An installation is potentially exposed if it is running IntelliJ IDEA before 2026.3 and users can work with untrusted projects where Terraform File Watchers are present.

What is the immediate remediation?

Upgrade IntelliJ IDEA to version 2026.3 or later.

CVE-2026-123849: Security vulnerability

Event History

Frequently Asked Questions

Which IntelliJ IDEA installations should be prioritized for remediation?

How can I determine whether an installation is potentially exposed?

What is the immediate remediation?

Company

Resources

Contact

Frequently Asked Questions

Which IntelliJ IDEA installations should be prioritized for remediation?

How can I determine whether an installation is potentially exposed?

What is the immediate remediation?