JetBrains PyCharm vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20241
3. 20267

Newest CVEs

• CVE-2026-118697

  In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4; CLion…

  JetBrains · Toolbox App

  Critical9.0
• CVE-2026-118696

  In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4,…

  JetBrains · IntelliJ IDEA

  High8.0
• CVE-2026-75060

  In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools

  JetBrains · PyCharm

  High8.4
• CVE-2026-75059

  In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible

  JetBrains · PyCharm

  Medium4.4
• CVE-2026-65908

  In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrusted project open

  JetBrains · PyCharm

  High8.6
• CVE-2026-49384

  In JetBrains PyCharm before 2025.3.4 stored XSS in Jupyter notebook Markdown cells was possible

  JetBrains · PyCharm

  Medium6.1
• CVE-2026-25847

  In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possible

  JetBrains · PyCharm

  High8.2
• CVE-2024-37051

  GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7,…

  JetBrains · IntelliJ IDEA

  Critical9.3
• CVE-2022-29820

  In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possible

  JetBrains · PyCharm

  Low3.0