Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-59792: IntelliJ IDEA Path Traversal Vulnerability in Workspace ID Handling

CVE-2026-59792 CVE-2026-59792

Summary

Old versions of IntelliJ IDEA allow an attacker to execute code on your computer by manipulating project file paths. This is a security risk because it could allow unauthorized access to your system. Update to the latest version of IntelliJ IDEA to fix this issue.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions
jetbrains	intellij idea	< 2026.1.4, 2026.2
jetbrains	intellij_idea	< 2026.1.4 `cpe:2.3:a:jetbrains:intellij_idea::::::::`

Original title

In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible

Original description

In JetBrains IntelliJ IDEA before 2026.1.4,
2026.2 code execution via path traversal in project workspace ID handling was possible

mitre CVSS3.1 9.6

Vulnerability type

CWE-23

https://www.jetbrains.com/privacy-security/issues-fixed/

Published: 10 Jul 2026 · Updated: 16 Jul 2026 · First seen: 10 Jul 2026