Dashboard / CVE-2026-123293

CVE-2026-123293

HIGH
MEDIUM Priority: 0.01 BB Relevance: 41/100
Published: 2026-11-06 Modified: 2026-11-10 First seen: 2026-11-06 Status: active

Attack Surface

Low Complexity No Auth Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: Required
S: Unchanged
C: High
I: High
A: High

Description

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Terraform tool path setting

Weakness Classification (1)

Affected Software (4)

VendorProductVersion
JetBrains IntelliJ IDEA 0 < 2026.3, 2026.2.4
JetBrains IntelliJ IDEA 0 < 2026.3, 2026.2.4
JetBrains IntelliJ IDEA 0 < 2026.3, 2026.2.4
jetbrains intellij_idea < 2026.2.4

References & Advisories (1)

Bug Bounty Relevance

41 / 100
✓ No authentication
✓ Low complexity

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.19%
Raw Score 0.001900
Percentile 8.7%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00190
2026-11-12
0.00190
2026-11-10
0.00190
2026-11-09
0.00190
2026-11-08
0.00190
2026-11-07
0.00190

Intelligence Sources

mitre ref →
nvd ref →

External Links