In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log (CVE-2026-75057)
JetBrains IntelliJ IDEA versions before 2026.1.5 contain a vulnerability where git credentials are written in plaintext to the IDE log files. This exposure could allow local attackers with access to the log files to obtain sensitive credential information. The vulnerability has a medium severity rating with a CVSS score of 6.2.
AI Analysis
Technical Summary
CVE-2026-75057 describes a vulnerability in JetBrains IntelliJ IDEA prior to version 2026.1.5 where git credentials were improperly logged in plaintext within the IDE log files. This issue is classified under CWE-532 (Information Exposure Through Log Files). The vulnerability allows unauthorized local users to access sensitive git credentials by reading the log files. The CVSS v3.1 base score is 6.2, reflecting a medium severity with local attack vector, low attack complexity, no privileges required, and no user interaction needed. Confidentiality impact is high, while integrity and availability impacts are none.
Potential Impact
The vulnerability exposes git credentials in plaintext within IDE log files, which could lead to unauthorized disclosure of sensitive authentication information if an attacker gains access to these logs. This compromises confidentiality but does not affect integrity or availability of the system.
Mitigation Recommendations
A fix is available in JetBrains IntelliJ IDEA version 2026.1.5. Users should upgrade to this version or later to prevent credential exposure in log files. No additional mitigation steps are indicated.
In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log (CVE-2026-75057)
Description
JetBrains IntelliJ IDEA versions before 2026.1.5 contain a vulnerability where git credentials are written in plaintext to the IDE log files. This exposure could allow local attackers with access to the log files to obtain sensitive credential information. The vulnerability has a medium severity rating with a CVSS score of 6.2.
CVSS v3.1
Score 6.2medium
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-75057 describes a vulnerability in JetBrains IntelliJ IDEA prior to version 2026.1.5 where git credentials were improperly logged in plaintext within the IDE log files. This issue is classified under CWE-532 (Information Exposure Through Log Files). The vulnerability allows unauthorized local users to access sensitive git credentials by reading the log files. The CVSS v3.1 base score is 6.2, reflecting a medium severity with local attack vector, low attack complexity, no privileges required, and no user interaction needed. Confidentiality impact is high, while integrity and availability impacts are none.
Potential Impact
The vulnerability exposes git credentials in plaintext within IDE log files, which could lead to unauthorized disclosure of sensitive authentication information if an attacker gains access to these logs. This compromises confidentiality but does not affect integrity or availability of the system.
Mitigation Recommendations
A fix is available in JetBrains IntelliJ IDEA version 2026.1.5. Users should upgrade to this version or later to prevent credential exposure in log files. No additional mitigation steps are indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-4gfp-9xp3-f73r
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-75057"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6a838c48bf8831d539b4c8b5
Added to database: 08/17/2026, 22:33:44 UTC
Last enriched: 09/17/2026, 22:14:10 UTC
Last updated: 10/02/2026, 02:46:06 UTC
Views: 34
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.