A DOM-based cross-site scripting (XSS) vulnerability exists in JetBrains IntelliJ IDEA versions before 2026.3 in the OpenAPI preview error view. This vulnerability could allow an attacker to execute arbitrary code in the context of the affected application. The flaw is identified as CVE-2026-123301 and has a high severity rating.