CVE-2026-86505
Received Received - Intake

JetBrains IntelliJ IDEA Project Metadata Exposure

Publication date: 2026-09-07

Last updated on: 2026-09-07

Assigner: JetBrains s.r.o.

Description
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-07
Last Modified
2026-09-07
Generated
2026-09-07
AI Q&A
2026-09-07
EPSS Evaluated
N/A
NVD
CVE-2026-86505
EUVD
EUVD-2026-72521

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
jetbrains intellij_idea to 2026.2.2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-201 The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in JetBrains IntelliJ IDEA before 2026.2.2 involves a missing project-trust check that allows project metadata to be leaked to the JetBrains Marketplace. This could expose sensitive information about a project without the user's knowledge.

Detection Guidance

This vulnerability involves metadata leakage in JetBrains IntelliJ IDEA before 2026.2.2. To detect it, check the IntelliJ IDEA version installed on your system. If it is below 2026.2.2, the system is vulnerable. No specific commands are provided for detection beyond version verification.

Impact Analysis

The impact includes potential exposure of project details to unauthorized parties through the JetBrains Marketplace. This could lead to information leaks, compromised intellectual property, or unintended disclosure of sensitive data.

Compliance Impact

This vulnerability may lead to non-compliance with data protection regulations like GDPR or HIPAA if project metadata includes personal or sensitive data. Unauthorized disclosure could result in legal penalties or reputational damage.

Mitigation Strategies

Update JetBrains IntelliJ IDEA to version 2026.2.2 or later to address the metadata leakage issue. Ensure all installations are patched to prevent unauthorized exposure of project metadata.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-86505. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart