This vulnerability in JetBrains PyCharm versions prior to 2026.2.1 allows code execution through the Quick Documentation feature. It is classified under CWE-79, indicating an input handling flaw that can lead to cross-site scripting or similar injection attacks. The CVSS 3.1 base score is 4.4, reflecting a medium impact with local attack vector, low complexity, no privileges required, but requiring user interaction. There is no known public exploit in the wild, and no official remediation level or patch has been documented at this time.

Successful exploitation could lead to limited code execution within the context of the affected PyCharm application, potentially allowing an attacker to execute arbitrary code or scripts via the Quick Documentation feature. The impact is limited to confidentiality and integrity with no availability impact, and the attack requires local access and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when using the Quick Documentation feature and avoid opening untrusted or malicious content that could trigger this vulnerability.