CVE-2026-49382 MEDIUM

CVE-2026-49382

Vendor Jetbrains
Product IntelliJ IDEA
Weakness CWE-1336
Published May 29, 2026
Last update May 29, 2026

CVSS base score

4.5/10
Attack vector Local
Attack complexity High
Privileges required None
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin

Key dates

02Disclosure timeline

May 29, 2026 CVE published
May 29, 2026 Record updated