CVE-2026-64811 is a vulnerability in JetBrains IntelliJ IDEA prior to version 2026.2 where arbitrary code execution can occur through development container configuration before the user grants project trust. The vulnerability is classified as CWE-829 (Inclusion of Functionality from Untrusted Control Sphere). The CVSS 3.1 score is 7.8, indicating high severity, with attack vector local, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available to confirm remediation status.

Successful exploitation allows an attacker with local access to execute arbitrary code on the affected system before the project is trusted, potentially compromising confidentiality, integrity, and availability of the system. The attack requires user interaction and local access, limiting remote exploitation but still posing a significant risk to users running vulnerable versions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening untrusted projects or development containers and avoid granting project trust prematurely.