CVE-2026-75052 is a command injection vulnerability in JetBrains IntelliJ IDEA prior to version 2026.2.1. It arises from improper handling of crafted Markdown preview content within trusted projects, potentially allowing an attacker to execute arbitrary commands. The vulnerability is classified under CWE-77 (Improper Neutralization of Special Elements used in a Command). The CVSS 3.1 base score is 3.6, reflecting low severity due to local attack vector, high attack complexity, no privileges required, and user interaction needed. There is no vendor advisory or patch information currently available to confirm remediation status.

Successful exploitation could allow an attacker with local access and user interaction to execute arbitrary commands via malicious Markdown preview content in trusted projects. The impact is limited to low confidentiality and integrity loss, with no availability impact. The attack complexity is high, and no privileges are required, but user interaction is necessary.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid opening untrusted Markdown content in trusted projects or restrict usage of Markdown preview features. Monitor JetBrains advisories for updates on patches or mitigations.