{"id":"CVE-2026-123845","kind":"vulnerability","aliases":["CVE-2026-123845"],"related":[],"title":"JetBrains IntelliJ IDEA: path traversal via JSON Schema references in untrusted projects","description":"In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects","summary":"In JetBrains IntelliJ IDEA before 2026.3, a crafted JSON Schema reference in an untrusted project could make the IDE resolve paths outside the project. The sources do not say what files an attacker can read or write.","severity":"low","cvss":3.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["intellij-idea","jetbrains","json-schema","other"],"not_affected_if":["trusted-projects-only","version-2026.3-or-later"],"how_to_check":"- Check the installed IntelliJ IDEA version under Help > About, or run `idea --version` if the launcher is on the PATH.\n- Treat any version below `2026.3` as affected.","fix":"- JetBrains IntelliJ IDEA: upgrade to `2026.3` or later (per the NVD entry's affected range).","status":"open","published_at":"2026-11-06T17:17:23+00:00","first_seen_at":"2026-11-06T17:43:13+00:00","triaged_at":"2026-11-06T17:45:45+00:00","updated_at":"2026-11-06T17:45:45+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-11-06T17:45:45Z","model":"claude-haiku-5-5","output":{"fix":"- JetBrains IntelliJ IDEA: upgrade to `2026.3` or later (per the NVD entry's affected range).","reach":"local","title":"JetBrains IntelliJ IDEA: path traversal via JSON Schema references in untrusted projects","impact":"low","summary":"In JetBrains IntelliJ IDEA before 2026.3, a crafted JSON Schema reference in an untrusted project could make the IDE resolve paths outside the project. The sources do not say what files an attacker can read or write.","audience":"developers","category":"other","nicknames":[],"who_cares":["intellij-idea","jetbrains","json-schema"],"confidence":0.5,"fix_status":"available","needs_auth":"no","worst_case":"unknown file contents readable or written outside the project","analyst_note":"","how_to_check":"- Check the installed IntelliJ IDEA version under Help > About, or run `idea --version` if the launcher is on the PATH.\n- Treat any version below `2026.3` as affected.","plain_action":"","needs_analyst":false,"not_affected_if":["trusted-projects-only","version-2026.3-or-later"],"who_is_affected":"Developers who open projects from untrusted sources in IntelliJ IDEA before 2026.3 are exposed when the project uses JSON Schema references. Teams that only open their own trusted repositories are at lower risk. The sources do not describe the exact configuration needed to trigger it.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000686,"input_tokens":4177,"output_tokens":536,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-123845':15A,18A '-2026':14A,17A '2026.3':31B,68C 'attack':58B 'could':41B 'craft':33B 'cve':13A,16A 'file':56B 'ide':44B 'idea':3A,21B,29B,66C 'intellij':2A,20B,28B,65C 'intellij-idea':19B 'jetbrain':1A,22B,27B,64C 'json':7A,24B,34B,74C 'json-schema':23B 'make':42B 'outsid':47B 'path':4A,46B,69C 'possibl':72C 'project':12A,40B,49B,79C 'read':60B 'refer':9A,36B,76C 'resolv':45B 'say':54B 'schema':8A,25B,35B,75C 'sourc':51B 'travers':5A,70C 'untrust':11A,39B,78C 'via':6A,73C 'write':62B","nicknames":[],"mitigations":[],"who_affected":"Developers who open projects from untrusted sources in IntelliJ IDEA before 2026.3 are exposed when the project uses JSON Schema references. Teams that only open their own trusted repositories are at lower risk. The sources do not describe the exact configuration needed to trigger it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"pkeys":[],"ptokens":[],"labels":["intellijidea","jetbrains","jsonschema","low","other"],"campaign_type":null,"search_a":"'-123845':15A,18A '-2026':14A,17A 'cve':13A,16A 'idea':3A 'intellij':2A 'jetbrain':1A 'json':7A 'path':4A 'project':12A 'refer':9A 'schema':8A 'travers':5A 'untrust':11A 'via':6A","search_b":"'2026.3':31B 'attack':58B 'could':41B 'craft':33B 'file':56B 'ide':44B 'idea':21B,29B 'intellij':20B,28B 'intellij-idea':19B 'jetbrain':22B,27B 'json':24B,34B 'json-schema':23B 'make':42B 'outsid':47B 'path':46B 'project':40B,49B 'read':60B 'refer':36B 'resolv':45B 'say':54B 'schema':25B,35B 'sourc':51B 'untrust':39B 'write':62B","search_c":"'2026.3':68C 'idea':66C 'intellij':65C 'jetbrain':64C 'json':74C 'path':69C 'possibl':72C 'project':79C 'refer':76C 'schema':75C 'travers':70C 'untrust':78C 'via':73C","first_public_at":"2026-11-06T17:17:23+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss_by":"cve@jetbrains.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-123845","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123845","severity":null,"published_at":"2026-11-06T17:17:23+00:00","modified_at":"2026-11-06T17:17:23+00:00","first_seen_at":"2026-11-06T17:43:13+00:00","fetched_at":"2026-11-06T17:43:13+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}