CVE-2026-86501 describes an information exposure vulnerability in JetBrains IntelliJ IDEA prior to version 2026.2.2. Terminal command inputs entered by users could be logged into the idea.log file, potentially exposing sensitive command data. The vulnerability is categorized as CWE-532, indicating exposure of information through log files. The CVSS 3.1 base score is 2.8, reflecting low impact due to local attack vector, low privileges required, and limited confidentiality impact. No vendor advisory or patch information is provided at this time.

The vulnerability may lead to unintended disclosure of terminal command inputs via the idea.log file. This could expose sensitive command information to users or processes with access to the log files. There is no impact on integrity or availability. Exploitation requires local access with low privileges and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to idea.log files and avoid entering sensitive commands in the terminal within IntelliJ IDEA.