CVE-2026-123842

Description

In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives

Affected Platforms

Weakness Type

CWE-59

References

• https://www.jetbrains.com/privacy-security/issues-fixed/