CVE-2026-123304
In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck path
CVSS
7.8
Alto
EPSS
—
KEV
—
Exploit Today
—
0-100
Publicado: 6 nov 2026 · Última mod.: 6 nov 2026 · CWE-829
Sin historial EPSS suficiente todavía.
In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck path
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1233257.1 ALT—
———In JetBrains YouTrack before 2025.3.170763,
2026.1.14150,
2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandbox page8hCVE-2026-1233226.3 MED—
———In JetBrains WebStorm before 2026.3,
2026.2.4 code execution was possible in untrusted projects via the Angular CLI schematics loader8hCVE-2026-1233217.8 ALT—
———In JetBrains WebStorm before 2026.3,
2026.2.3 code execution via Grunt and Gulp task loading was possible in untrusted projects8hCVE-2026-1233133.3 BAJ—
———In JetBrains IntelliJ IDEA before 2026.3 improper checks could enable disabled plugins via external dependency settings8hCVE-2026-1233086.3 MED—
———In JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in untrusted projects8hCVE-2026-1233027.8 ALT—
———In JetBrains IntelliJ IDEA before 2026.3,
2026.2.4,
2026.1.5.1,
2025.3.6.2 code execution was possible in untrusted projects via script engine discovery8h