CVE-2026-49367

Description

References

• jetbrains.com/privacy-security/issues-fixed · Vendor Advisory

intellij idea 的其他漏洞

• CVE-2026-100256高危 7.8In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projects
• CVE-2026-75058中危 5.5In JetBrains IntelliJ IDEA before 2026.2.1 xXE was possible in the Eclipse settings importers
• CVE-2026-75057中危 6.2In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log
• CVE-2026-75056高危 7.8In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible
• CVE-2026-75055中危 5.5In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE