This vulnerability, identified as CWE-611 (Improper Restriction of XML External Entity Reference), affects JetBrains IntelliJ IDEA versions prior to 2026.2.1. The Hadoop ResourceManager component is susceptible to an XXE attack that could enable an attacker to read local files. The CVSS 3.1 base score is 5.5, reflecting a medium severity with local attack vector, low attack complexity, no privileges required, and user interaction needed. Confidentiality impact is high, while integrity and availability are not affected. There is no vendor advisory or patch information currently available to confirm remediation status.

An attacker could exploit the XXE vulnerability to read local files on the system running IntelliJ IDEA, potentially exposing sensitive information. The vulnerability does not allow modification of data or disruption of service. Exploitation requires local access and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when interacting with untrusted XML inputs in the Hadoop ResourceManager context within IntelliJ IDEA. No official remediation or temporary workaround has been provided by the vendor at this time.