CVE-2026-64811 is a vulnerability in JetBrains IntelliJ IDEA affecting versions before 2026.2. It involves improper enforcement of project trust related to development container configurations, enabling arbitrary code execution before the user grants trust to the project. The CVSS 3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, no privileges required, user interaction required, and impacts to confidentiality, integrity, and availability all rated high. No vendor advisory or patch information is currently available, and no known exploits in the wild have been reported.

Successful exploitation allows an attacker with local access and user interaction to execute arbitrary code on the affected system before project trust is granted. This can lead to complete compromise of confidentiality, integrity, and availability of the system running IntelliJ IDEA. The vulnerability poses a significant risk to users who open untrusted projects with development container configurations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening projects with development container configurations and avoid opening untrusted projects. Monitor JetBrains advisories for updates and apply patches promptly once available.