---
id: "CVE-2026-123306"
page: "https://infrastack.ai/live/CVE-2026-123306"
kind: "vulnerability"
aliases: ["CVE-2026-123306"]
title: "JetBrains IntelliJ IDEA: headless runs could add untrusted server certificates to trust store"
severity: "high"
cvss: 7.4
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["ci", "intellij-idea", "jetbrains", "package"]
not_affected_if: ["interactive-only-use", "version-2026.3-or-later"]
published_at: "2026-11-06T11:17:09+00:00"
first_seen_at: "2026-11-06T11:41:25+00:00"
updated_at: "2026-11-06T11:42:07+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-123306", "first_seen_at": "2026-11-06T11:41:25+00:00"}]
exploit_sources: []
---

# JetBrains IntelliJ IDEA: headless runs could add untrusted server certificates to trust store

Link for people: https://infrastack.ai/live/CVE-2026-123306 (this .md is for agents)

In JetBrains IntelliJ IDEA before 2026.3, improper checks let server certificates be added to the trust store during headless runs. An attacker positioned on the network path could get the IDE to trust a server it should reject.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the IntelliJ IDEA version in Help > About or the product info file; versions before `2026.3` are affected.
- Note whether IDEA runs headless in CI or build jobs, since the flaw is limited to headless runs.

## Fix

- JetBrains IntelliJ IDEA: `2026.3`

## Timeline

- 2026-11-06T11:41:25+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-123306

## From the sources

In JetBrains IntelliJ IDEA before 2026.3 improper checks allowed server certificates to be added to the trust store during headless runs

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_