---
id: "CVE-2026-123278"
page: "https://infrastack.ai/live/CVE-2026-123278"
kind: "vulnerability"
aliases: ["CVE-2026-123278"]
title: "JetBrains IntelliJ IDEA: unauthenticated JDBC RMI endpoint allows code execution"
severity: "medium"
cvss: 6.7
epss: null
exploited: false
status: "open"
category: "runtime"
products: []
ecosystems: []
tags: ["intellij-idea", "java", "jdbc", "jetbrains", "runtime"]
not_affected_if: ["isolated-local-machine", "version-2026.3-or-later"]
published_at: "2026-11-06T11:17:06+00:00"
first_seen_at: "2026-11-06T11:41:24+00:00"
updated_at: "2026-11-06T11:42:16+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-123278", "first_seen_at": "2026-11-06T11:41:24+00:00"}]
exploit_sources: []
---

# JetBrains IntelliJ IDEA: unauthenticated JDBC RMI endpoint allows code execution

Link for people: https://infrastack.ai/live/CVE-2026-123278 (this .md is for agents)

Before version 2026.3, JetBrains IntelliJ IDEA exposed an unauthenticated JDBC worker RMI endpoint. An attacker who can reach it can run code on the machine running the IDE.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed IntelliJ IDEA version in Help > About, or run `idea --version` if the launcher is on the PATH.
- Confirm whether the IDE is reachable from other machines on the network, since the RMI endpoint is only reachable if it is.

## Fix

- JetBrains IntelliJ IDEA: move to `2026.3` or later.

## Timeline

- 2026-11-06T11:41:24+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-123278

## From the sources

In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpoint

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_