CVE Catalog
CVE-2026-75055
MediumCVSS 5.5Summary
In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE.
Risk Assessment
An attacker could exploit XXE to read local files, potentially leading to disclosure of sensitive configuration or source data in the development environment.
Recommendation
It is recommended to upgrade IntelliJ IDEA to version 2026.2.1 or later to fix the XXE vulnerability.
Original NVD description (English source)
In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE