{"id":"CVE-2026-123278","kind":"vulnerability","aliases":["CVE-2026-123278"],"related":[],"title":"JetBrains IntelliJ IDEA: unauthenticated JDBC RMI endpoint allows code execution","description":"In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpoint","summary":"Before version 2026.3, JetBrains IntelliJ IDEA exposed an unauthenticated JDBC worker RMI endpoint. An attacker who can reach it can run code on the machine running the IDE.","severity":"medium","cvss":6.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["intellij-idea","java","jdbc","jetbrains","runtime"],"not_affected_if":["isolated-local-machine","version-2026.3-or-later"],"how_to_check":"- Check the installed IntelliJ IDEA version in Help > About, or run `idea --version` if the launcher is on the PATH.\n- Confirm whether the IDE is reachable from other machines on the network, since the RMI endpoint is only reachable if it is.","fix":"- JetBrains IntelliJ IDEA: move to `2026.3` or later.","status":"open","published_at":"2026-11-06T11:17:06+00:00","first_seen_at":"2026-11-06T11:41:24+00:00","triaged_at":"2026-11-06T11:42:16+00:00","updated_at":"2026-11-06T11:42:16+00:00","category":"runtime","confidence":0.5,"triage":{"at":"2026-11-06T11:42:16Z","model":"claude-haiku-5-5","output":{"fix":"- JetBrains IntelliJ IDEA: move to `2026.3` or later.","reach":"network","title":"JetBrains IntelliJ IDEA: unauthenticated JDBC RMI endpoint allows code execution","impact":"high","summary":"Before version 2026.3, JetBrains IntelliJ IDEA exposed an unauthenticated JDBC worker RMI endpoint. An attacker who can reach it can run code on the machine running the IDE.","audience":"developers","category":"runtime","nicknames":[],"who_cares":["intellij-idea","jetbrains","java","jdbc"],"confidence":0.5,"fix_status":"available","needs_auth":"no","worst_case":"attacker runs code on the developer's machine","analyst_note":"Confirm from the JetBrains advisory whether the RMI endpoint is network-exposed by default and what the exact trigger conditions are.","how_to_check":"- Check the installed IntelliJ IDEA version in Help > About, or run `idea --version` if the launcher is on the PATH.\n- Confirm whether the IDE is reachable from other machines on the network, since the RMI endpoint is only reachable if it is.","plain_action":"","needs_analyst":true,"not_affected_if":["version-2026.3-or-later","isolated-local-machine"],"who_is_affected":"Developers running IntelliJ IDEA older than 2026.3 are exposed, most of all on shared or networked machines where the RMI port can be reached by others. The sources do not describe a specific configuration that is required, so exposure is assumed for any affected version. Teams whose IDE instances are only used locally on isolated machines face lower risk.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000724,"input_tokens":4188,"output_tokens":611,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-123278':13A,16A '-2026':12A,15A '2026.3':26B,57C 'allow':8A 'attack':38B 'code':9A,45B,58C 'cve':11A,14A 'endpoint':7A,36B,68C 'execut':10A,59C 'expos':30B 'ide':51B 'idea':3A,19B,29B,55C 'intellij':2A,18B,28B,54C 'intellij-idea':17B 'java':20B 'jdbc':5A,21B,33B,65C 'jetbrain':1A,22B,27B,53C 'machin':48B 'possibl':61C 'reach':41B 'rmi':6A,35B,67C 'run':44B,49B 'runtim':23B 'unauthent':4A,32B,64C 'version':25B 'via':62C 'worker':34B,66C","nicknames":[],"mitigations":[],"who_affected":"Developers running IntelliJ IDEA older than 2026.3 are exposed, most of all on shared or networked machines where the RMI port can be reached by others. The sources do not describe a specific configuration that is required, so exposure is assumed for any affected version. Teams whose IDE instances are only used locally on isolated machines face lower risk.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"pkeys":[],"ptokens":[],"labels":["intellijidea","java","jdbc","jetbrains","medium","runtime"],"campaign_type":null,"search_a":"'-123278':13A,16A '-2026':12A,15A 'allow':8A 'code':9A 'cve':11A,14A 'endpoint':7A 'execut':10A 'idea':3A 'intellij':2A 'jdbc':5A 'jetbrain':1A 'rmi':6A 'unauthent':4A","search_b":"'2026.3':26B 'attack':38B 'code':45B 'endpoint':36B 'expos':30B 'ide':51B 'idea':19B,29B 'intellij':18B,28B 'intellij-idea':17B 'java':20B 'jdbc':21B,33B 'jetbrain':22B,27B 'machin':48B 'reach':41B 'rmi':35B 'run':44B,49B 'runtim':23B 'unauthent':32B 'version':25B 'worker':34B","search_c":"'2026.3':57C 'code':58C 'endpoint':68C 'execut':59C 'idea':55C 'intellij':54C 'jdbc':65C 'jetbrain':53C 'possibl':61C 'rmi':67C 'unauthent':64C 'via':62C 'worker':66C","first_public_at":"2026-11-06T11:17:06+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss_by":"cve@jetbrains.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-123278","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123278","severity":null,"published_at":"2026-11-06T11:17:06+00:00","modified_at":"2026-11-06T11:17:06+00:00","first_seen_at":"2026-11-06T11:41:24+00:00","fetched_at":"2026-11-06T11:41:24+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}