VulnSocial

CVE-2026-49366General(jetbrains / intellij_idea)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion

jetbrains CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • intellij_idea

Threat summary

  • 4 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • Peaked 3d ago at 1 mentions (2026-05-29); latest day: 1
  • 4 total mentions across 4 days

Affected systems

Vendors
jetbrains
Products
intellij_idea

Deep dive

Activity timeline4 mentions / 4d
00111Mentions · 2026-05-29: 1Mentions · 2026-06-10: 1Mentions · 2026-07-27: 1Mentions · 2026-10-11: 1Technical Details · 2026-05-29: 1Technical Details · 2026-07-27: 105-2906-1007-2710-11
Signal classification2 categories
General
266.7%
Disclosure
133.3%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-05-291
Disclosure1
2026-06-101
General1
2026-07-271
General1
Full discourse4 posts
  • DailyCVE@dailycve

    🔴 JetBrains IntelliJ IDEA, Command Injection, #CVE-2026-49366 (Critical) -DC-Oct2026-3097 https://dailycve.com/jetbrains-intellij-idea-command-injection-cve-2026-49366-critical-dc-oct2026-3097/

    0000033
    241 followersView on X
  • IntegSec@integ_sec
    General

    CVE-2026-49366: JetBrains IntelliJ IDEA Filename Completion Command Injection - What It Means for Your Business and How to Respond https://hubs.li/Q04qYBjL0

    Post summary

    The snippet announces a command‑injection flaw in JetBrains IntelliJ IDEA and directs readers to a resource on how to respond, but it provides no PoC, exploit code, evidence of active exploitation, or patch details.

    0000022
    32 followersView on X
  • CERT-PY@CERTpy
    General

    ⚠️ Vulnerabilidades en productos JetBrains ❗ CVE-2026-49368 ❗ CVE-2026-49367 ❗ CVE-2026-49366 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-jetbrains/ https://t.co/Azn3MRuYcn

    Post summary

    The tweet lists three CVE identifiers related to JetBrains products and provides links to external sources for additional information.

    0000082
    6.7K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-49366 In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion https://www.cve.org/CVERecord?id=CVE-2026-49366

    Post summary

    JetBrains IntelliJ IDEA versions before 2026.1.1 are vulnerable to command injection via filename completion (CVE-2026-49366).

    00000250
    57.5K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appjetbrainsintellij_idea---

Explore more

Back to dashboardjetbrains CVEsintellij_idea vulnerabilities