CVE-2026-123278 · Runtime
NO FIX YET · SEE WHAT TO DO
Before version 2026.3, JetBrains IntelliJ IDEA exposed an unauthenticated JDBC worker RMI endpoint. An attacker who can reach it can run code on the machine running the IDE.
first public Nov 6, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Developers running IntelliJ IDEA older than 2026.3 are exposed, most of all on shared or networked machines where the RMI port can be reached by others. The sources do not describe a specific configuration that is required, so exposure is assumed for any affected version. Teams whose IDE instances are only used locally on isolated machines face lower risk.
Not affected if isolated-local-machine, version-2026.3-or-later
Who cares intellij-idea, java, jdbc, jetbrains
idea --version if the launcher is on the PATH.2026.3 or later.In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpoint
This page as .md · .json · CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.