anonhaven

CVE-2026-65908

HIGH CVSS 3.1: 8.6 EPSS 0.13%
Updated Jul 24, 2026
Python
Parameter Value
CVSS 8.6 (HIGH)
Affected Versions before 2026.1.4
Type CWE-829 (Inclusion of Functionality from Untrusted Source)
Vendor Python
Public PoC No

In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrusted project open

Attack Parameters

Attack Vector
Local
Requires local access
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
Required
User action required

Impact Assessment

Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service

CVSS Vector v3.1

Weakness Type (CWE)

CWE-829 Inclusion of Functionality from Untrusted Source

References 1

https://www.jetbrains.com/privacy-security/issues-fixed/
cve@jetbrains.com
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-17497

Python

8.3

CVE-2026-63720

Koxudaxi

7.5

CVE-2025-71408

Python

8.5

CVE-2026-66138

Python

7.2

CVE-2026-54422

Python

5.5