CVE-2026-64814 is a vulnerability in JetBrains IntelliJ IDEA prior to version 2026.2 that permits unauthorized file access in Remote Development sessions. The weakness corresponds to CWE-862, indicating missing authorization controls. The vulnerability can be exploited remotely without authentication or user interaction, leading to a complete confidentiality breach. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) confirms the ease of exploitation and the high impact on confidentiality. As of the published date, no official fix or patch has been announced by JetBrains, and no known exploits are reported in the wild.

Successful exploitation allows an attacker to access files without authorization during Remote Development sessions in affected versions of IntelliJ IDEA. This results in a complete confidentiality compromise of potentially sensitive files accessible through the development environment. There is no impact on integrity or availability reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting Remote Development session access and monitoring for unusual activity. Follow JetBrains advisories closely for updates on patches or temporary mitigations.