CVE-2026-75055: XEE
Published Aug 17, 2026
·Updated
In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE
Affected Software
2 affected components
JetBrains IntelliJ IDEA<2026.2.1
JetBrains IntelliJ IDEA<2026.2.1
Event History
Aug 17, 2026
CVE Published
via MITRE·03:54 PM
Data Sourced
via MITRE·03:54 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the CVSS score of CVE-2026-75055?
The CVSS score of CVE-2026-75055 is 5.5, indicating a medium severity level.
2
How does CVE-2026-75055 affect JetBrains IntelliJ IDEA?
CVE-2026-75055 allows hadoop ResourceManager to read local files via XML External Entity (XXE) injection in JetBrains IntelliJ IDEA.
3
What are the recommended steps to mitigate CVE-2026-75055?
To mitigate CVE-2026-75055, users should update JetBrains IntelliJ IDEA to version 2026.2.1 or later.
4
When was CVE-2026-75055 published?
CVE-2026-75055 was published on August 17, 2026.
5
In which versions of JetBrains IntelliJ IDEA is CVE-2026-75055 present?
CVE-2026-75055 is present in JetBrains IntelliJ IDEA versions prior to 2026.2.1.