Jetbrains
Page 2 of 7 — Jetbrains CVEs from a corpus of 677, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-59792 | Critical | 9.6 | 2026-07-10 | In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible |
CVE-2026-59791 | Low | 3.5 | 2026-07-10 | In JetBrains YouTrack before 2026.2.17012 cSS injection via Mermaid diagram rendering was possible |
CVE-2026-57926 | Low | 2.6 | 2026-06-26 | In JetBrains YouTrack before 2026.2.16593 the websandbox bridge was vulnerable to a prototype pollution attack |
CVE-2026-57925 | Medium | 4.3 | 2026-06-26 | In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading saved queries and tags |
CVE-2026-57924 | Medium | 4.3 | 2026-06-26 | In JetBrains YouTrack before 2026.2.16593 default role configuration exposed excessive user profile details |
CVE-2026-57923 | Medium | 5.3 | 2026-06-26 | In JetBrains YouTrack before 2026.2.16593 improper authorisation in the app configurations endpoint allowed modifying project settings |
CVE-2026-57922 | Low | 3.1 | 2026-06-26 | In JetBrains YouTrack before 2026.2.16593 project settings disclosure via the MCP was possible |
CVE-2026-57921 | Medium | 4.3 | 2026-06-26 | In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading users' private data via the comment templates endpoint |
CVE-2026-53914 | Medium | 6.7 | 2026-06-26 | In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata |
CVE-2026-56142 | Critical | 9.9 | 2026-06-19 | In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 privilege escalation by attaching authenticatio… |
CVE-2026-56141 | Critical | 9.8 | 2026-06-19 | In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 account takeover via predictable restore codes… |
CVE-2026-53915 | High | 7.1 | 2026-06-19 | In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration |
CVE-2026-50242 | Critical | 10.0 | 2026-06-19 | In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database acces… |
CVE-2026-49386 | Medium | 6.5 | 2026-05-29 | In JetBrains YouTrack before 2026.1.13570 improper access control allowed enumeration of restricted issues and articles on Planning Canvas |
CVE-2026-49385 | Medium | 6.5 | 2026-05-29 | In JetBrains YouTrack before 2026.1.13570 improper access control allowed low-privileged users to modify service accounts |
CVE-2026-49384 | Medium | 6.1 | 2026-05-29 | In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possible |
CVE-2026-49383 | Low | 3.3 | 2026-05-29 | In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible |
CVE-2026-49382 | Medium | 4.5 | 2026-05-29 | In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin |
CVE-2026-49381 | Low | 3.4 | 2026-05-29 | In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible |
CVE-2026-49380 | Low | 3.1 | 2026-05-29 | In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible |
CVE-2026-49379 | Medium | 6.5 | 2026-05-29 | In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names |
CVE-2026-49378 | Medium | 4.3 | 2026-05-29 | In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion |
CVE-2026-49377 | Medium | 4.3 | 2026-05-29 | In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters |
CVE-2026-49376 | Medium | 6.5 | 2026-05-29 | In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin |
CVE-2026-49375 | Medium | 6.1 | 2026-05-29 | In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download page |
CVE-2026-49374 | High | 7.6 | 2026-05-29 | In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters |
CVE-2026-49373 | High | 7.1 | 2026-05-29 | In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings |
CVE-2026-49372 | High | 7.5 | 2026-05-29 | In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible |
CVE-2026-49371 | High | 7.1 | 2026-05-29 | In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible |
CVE-2026-49370 | Low | 3.4 | 2026-05-29 | In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requests |
CVE-2026-49369 | Medium | 4.3 | 2026-05-29 | In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on Users and Groups pages |
CVE-2026-49368 | High | 8.7 | 2026-05-29 | In JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possible |
CVE-2026-49367 | High | 8.0 | 2026-05-29 | In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account |
CVE-2026-49366 | High | 7.8 | 2026-05-29 | In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion |
CVE-2026-44413 | High | 8.2 | 2026-05-11 | In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unauthorised access |
CVE-2026-41882 | High | 7.4 | 2026-04-30 | In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 reading arbitrary local files was possible via built-in web serv… |
CVE-2026-41153 | Medium | 5.8 | 2026-04-17 | In JetBrains Junie before 252.549.29 command execution was possible via malicious project file |
CVE-2026-33392 | High | 7.2 | 2026-04-17 | In JetBrains YouTrack before 2025.3.131383 high privileged user can achieve RCE via sandbox bypass |
CVE-2026-32745 | Medium | 6.3 | 2026-03-13 | In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settings |
CVE-2026-32229 | Medium | 6.8 | 2026-03-11 | In JetBrains Hub before 2026.1 possible on sign-in account mismatch with non-SSO auth and 2FA disabled |
CVE-2026-28196 | Low | 2.3 | 2026-02-25 | In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on disk |
CVE-2026-28195 | Medium | 4.3 | 2026-02-25 | In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurations |
CVE-2026-28194 | Medium | 4.3 | 2026-02-25 | In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow |
CVE-2026-28193 | High | 8.8 | 2026-02-25 | In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint |
CVE-2026-25848 | Critical | 9.1 | 2026-02-09 | In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible |
CVE-2026-25847 | High | 8.2 | 2026-02-09 | In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible |
CVE-2026-25846 | Medium | 6.5 | 2026-02-09 | In JetBrains YouTrack before 2025.3.119033 access tokens could be exposed in Mailbox logs |
CVE-2025-68269 | Medium | 5.4 | 2025-12-16 | In JetBrains IntelliJ IDEA before 2025.3 missing confirmation allowed opening of untrusted remote projects over SSH |
CVE-2025-68268 | Medium | 5.4 | 2025-12-16 | In JetBrains TeamCity before 2025.11.1 reflected XSS was possible on the storage settings page |
CVE-2025-68267 | Medium | 6.5 | 2025-12-16 | In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub personal access token instead of an installation token |
CVE-2025-68166 | Medium | 5.4 | 2025-12-16 | In JetBrains TeamCity before 2025.11 a DOM-based XSS was possible on the OAuth connections tab |
CVE-2025-68165 | Medium | 5.4 | 2025-12-16 | In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setup |
CVE-2025-68164 | Low | 2.7 | 2025-12-16 | In JetBrains TeamCity before 2025.11 port enumeration was possible via the Perforce connection test |
CVE-2025-68163 | Low | 3.5 | 2025-12-16 | In JetBrains TeamCity before 2025.11 stored XSS was possible on agentpushInstall page |
CVE-2025-68162 | Low | 2.7 | 2025-12-16 | In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configuration |
CVE-2025-67742 | Low | 3.8 | 2025-12-11 | In JetBrains TeamCity before 2025.11 path traversal was possible via file upload |
CVE-2025-67741 | Medium | 4.6 | 2025-12-11 | In JetBrains TeamCity before 2025.11 stored XSS was possible via session attribute |
CVE-2025-67740 | Low | 2.7 | 2025-12-11 | In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata |
CVE-2025-67739 | Low | 3.1 | 2025-12-11 | In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure |
CVE-2025-64773 | Low | 2.7 | 2025-11-11 | In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit |
CVE-2025-64685 | High | 8.1 | 2025-11-10 | In JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data disclosure |
CVE-2025-64684 | Medium | 4.3 | 2025-11-10 | In JetBrains YouTrack before 2025.3.104432 information disclosure was possible via the feedback form |
CVE-2025-64683 | Medium | 5.3 | 2025-11-10 | In JetBrains Hub before 2025.3.104432 information disclosure was possible via the Users API |
CVE-2025-64682 | Low | 2.7 | 2025-11-10 | In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit |
CVE-2025-64681 | Low | 2.7 | 2025-11-10 | In JetBrains Hub before 2025.3.104992 a race condition allowed bypass of the user limit via invitations |
CVE-2025-64457 | Medium | 4.2 | 2025-11-10 | In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition |
CVE-2025-64456 | High | 8.4 | 2025-11-10 | In JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows local privilege escalation |
CVE-2025-59458 | High | 8.3 | 2025-09-17 | In JetBrains Junie before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61, 243.284.61, 252.284.50, 252.284.54, 251.284.54, 251.284.50, 243.284.54, 2… |
CVE-2025-59457 | High | 7.7 | 2025-09-17 | In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on Windows |
CVE-2025-59456 | Medium | 5.5 | 2025-09-17 | In JetBrains TeamCity before 2025.07.2 path traversal was possible during project archive upload |
CVE-2025-59455 | Medium | 4.2 | 2025-09-17 | In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race condition |
CVE-2025-58335 | Medium | 5.5 | 2025-08-28 | In JetBrains Junie before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61, 243.284.61, 252.284.50, 252.284.54, 251.284.54, 251.284.50, 243.284.54, 2… |
CVE-2025-58334 | High | 8.1 | 2025-08-28 | In JetBrains IDE Services before 2025.5.0.1086, 2025.4.2.2164 users without appropriate permissions could assign high-privileged role for themselves |
CVE-2025-57734 | Medium | 4.3 | 2025-08-20 | In JetBrains TeamCity before 2025.07.1 aWS credentials were exposed in Docker script files |
CVE-2025-57733 | Medium | 5.5 | 2025-08-20 | In JetBrains TeamCity before 2025.07.1 sMTP injection was possible allowing modification of email content |
CVE-2025-57732 | High | 7.5 | 2025-08-20 | In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect directory ownership |
CVE-2025-57731 | High | 8.7 | 2025-08-20 | In JetBrains YouTrack before 2025.2.92387 stored XSS was possible via Mermaid diagram content |
CVE-2025-57730 | Medium | 5.2 | 2025-08-20 | In JetBrains IntelliJ IDEA before 2025.2 hTML injection was possible via Remote Development feature |
CVE-2025-57729 | Medium | 6.5 | 2025-08-20 | In JetBrains IntelliJ IDEA before 2025.2 unexpected plugin startup was possible due to automatic LSP server start |
CVE-2025-57728 | Medium | 6.5 | 2025-08-20 | In JetBrains IntelliJ IDEA before 2025.2 improper access control allowed Code With Me guest to discover hidden files |
CVE-2025-57727 | Medium | 4.7 | 2025-08-20 | In JetBrains IntelliJ IDEA before 2025.2 credentials disclosure was possible via remote reference |
CVE-2025-54538 | Medium | 5.5 | 2025-07-28 | In JetBrains TeamCity before 2025.07 password exposure was possible via command line in the "hg pull" command |
CVE-2025-54537 | Medium | 5.5 | 2025-07-28 | In JetBrains TeamCity before 2025.07 user credentials were stored in plain text in memory snapshots |
CVE-2025-54536 | Medium | 5.4 | 2025-07-28 | In JetBrains TeamCity before 2025.07 a CSRF was possible on GraphQL endpoint |
CVE-2025-54535 | Medium | 5.8 | 2025-07-28 | In JetBrains TeamCity before 2025.07 password reset and email verification tokens were using weak hashing algorithms |
CVE-2025-54534 | Medium | 4.8 | 2025-07-28 | In JetBrains TeamCity before 2025.07 reflected XSS was possible on the agentpushPreset page |
CVE-2025-54533 | Medium | 4.3 | 2025-07-28 | In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via VCS configuration |
CVE-2025-54532 | Medium | 4.3 | 2025-07-28 | In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via snapshot dependencies |
CVE-2025-54531 | High | 7.7 | 2025-07-28 | In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows |
CVE-2025-54530 | High | 7.5 | 2025-07-28 | In JetBrains TeamCity before 2025.07 privilege escalation was possible due to incorrect directory permissions |
CVE-2025-54529 | Low | 3.7 | 2025-07-28 | In JetBrains TeamCity before 2025.07 a CSRF was possible in external OAuth login integration |
CVE-2025-54528 | Medium | 5.4 | 2025-07-28 | In JetBrains TeamCity before 2025.07 a CSRF was possible in GitHub App connection flow |
CVE-2025-54527 | Medium | 6.1 | 2025-07-28 | In JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in widget sandbox allows popups to bypass… |
CVE-2025-53959 | High | 7.6 | 2025-07-15 | In JetBrains YouTrack before 2025.2.86069, 2024.3.85077, 2025.1.86199 email spoofing via an administrative API was possible |
CVE-2025-52879 | Medium | 4.8 | 2025-06-23 | In JetBrains TeamCity before 2025.03.3 reflected XSS in the NPM Registry integration was possible |
CVE-2025-52878 | Medium | 4.3 | 2025-06-23 | In JetBrains TeamCity before 2025.03.3 usernames were exposed to the users without proper permissions |
CVE-2025-52877 | Medium | 4.8 | 2025-06-23 | In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possible |
CVE-2025-52876 | Medium | 5.4 | 2025-06-23 | In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible |
CVE-2025-52875 | Medium | 5.4 | 2025-06-23 | In JetBrains TeamCity before 2025.03.3 a DOM-based XSS at the Performance Monitor page was possible |
CVE-2025-48391 | High | 7.7 | 2025-05-20 | In JetBrains YouTrack before 2025.1.76253 deletion of issues was possible due to missing permission checks in API |