CVE-2026-86504

Summary

In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution

Affected Software

VendorProductVersion RangeStatus
JetBrainsIntelliJ IDEA0 < 2026.2.2affected

Weaknesses

  • CWE-829: CWE-829

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References