CVE-2026-64813 is a critical security vulnerability in JetBrains IntelliJ IDEA before version 2026.2. It involves improper access control (CWE-602) that permits unauthorized users to modify IDE settings during Remote Development sessions. The vulnerability is remotely exploitable without authentication or user interaction, resulting in full compromise of confidentiality, integrity, and availability of the affected system. As of the published date, no official fix or remediation level has been announced by JetBrains.

Successful exploitation allows an attacker to modify IDE settings without authorization in a Remote Development context, potentially leading to full system compromise including data disclosure, alteration, or denial of service. The CVSS score of 10.0 reflects the highest severity with network attack vector, no required privileges or user interaction, and complete impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting Remote Development session access to trusted parties only and monitor for unusual activity. No official remediation or temporary workaround has been provided by JetBrains at this time.