anonhaven

CVE-2026-75054

MEDIUM CVSS 3.1: 6.3 EPSS 0.12%
Updated Aug 29, 2026
Jetbrains
Parameter Value
CVSS 6.3 (MEDIUM)
Affected Versions before 2026.2.1
Type CWE-918 (Server-Side Request Forgery (SSRF))
Vendor Jetbrains
Public PoC No

In JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in untrusted projects

Attack Parameters

Attack Vector
Local
Requires local access
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
Required
User action required

Impact Assessment

Confidentiality
High
Complete data leak
Integrity
None
No data modification
Availability
None
No disruption

CVSS Vector v3.1

Weakness Type (CWE)

CWE-918 Server-Side Request Forgery (SSRF)

Vulnerable Products

jetbrains:intellij idea

References 1

https://www.jetbrains.com/privacy-security/issues-fixed/
cve@jetbrains.com
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-75058

Jetbrains

5.5

CVE-2026-75057

Jetbrains

6.2

CVE-2026-75052

Jetbrains

3.6

CVE-2026-75051

Jetbrains

8.1

CVE-2026-63077

Jetbrains

9.8