This vulnerability in JetBrains IntelliJ IDEA prior to 2026.2 allows an attacker to modify settings without authorization during a Remote Development session. The issue is categorized as CWE-602, which involves improper restriction of access or authorization controls. The CVSS score of 10.0 reflects the critical nature of this flaw, with an attacker able to remotely exploit it without any privileges or user interaction, resulting in full compromise of confidentiality, integrity, and availability of the affected system. No patch or remediation level has been published by JetBrains as of the data provided.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to modify IDE settings during a Remote Development session, potentially leading to full compromise of the development environment's confidentiality, integrity, and availability. This could disrupt development workflows, expose sensitive code or configuration data, and allow further malicious actions within the affected environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to Remote Development sessions to trusted users only and monitor for unusual activity. Follow JetBrains' official channels for updates on patches or temporary mitigations.