In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion
CWE-78