JetBrains IntelliJ IDEA up to 2026.2 hadoop ResourceManager xml external entity reference

Summaryinfo

A vulnerability, which was classified as problematic, has been found in JetBrains IntelliJ IDEA. Affected is an unknown function of the component hadoop ResourceManager. This manipulation causes xml external entity reference. This vulnerability is tracked as CVE-2026-75055. The attack is restricted to local execution. No exploit exists.

Detailsinfo

A vulnerability classified as problematic was found in JetBrains IntelliJ IDEA. Affected by this vulnerability is an unknown functionality of the component hadoop ResourceManager. The manipulation with an unknown input leads to a xml external entity reference vulnerability. The CWE definition for the vulnerability is CWE-611. The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE

The advisory is shared at jetbrains.com. This vulnerability is known as CVE-2026-75055 since 08/17/2026. The exploitation appears to be easy. An attack has to be approached locally. It demands that the victim is doing some kind of user interaction. Neither technical details nor an exploit are publicly available.

Upgrading to version 2026.2.1 eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• JetBrains

Name

• IntelliJ IDEA

Version

• 2017.3.7
• 2018.1.8
• 2018.2.8
• 2018.3.4
• 2018.3.5
• 2019.1
• 2019.2
• 2019.3
• 2020.1
• 2020.2
• 2020.3
• 2020.3.3
• 2021.1
• 2021.3.1
• 2021.3.3
• 2022.1
• 2022.2
• 2022.2.2
• 2022.2.4
• 2022.3
• 2022.3.1
• 2023.1
• 2023.1.4
• 2023.2
• 2023.3.2
• 2023.3.3
• 2024.1
• 2024.2.4
• 2024.3
• 2024.3.7.1
• 2025.1.7.1
• 2025.2
• 2025.2.6.2
• 2025.3
• 2025.3.4.1
• 2026.1
• 2026.1.1
• 2026.1.1
• 2026.1.4
• 2026.1.5
• 2026.2

License

• free

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion