JetBrains IntelliJ IDEA
Moderate fix1 remedy
cpe:2.3:a:jetbrains:intellij_idea:*:*:*:*:*:*:*
Moderate fix1 remedy
- < 2025.2
JetBrains IntelliJ IDEA Automatic LSP Server Start Vulnerability Allowing Unexpected Plugin Startup
Vulnerability
Patched
A vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2025.2, where plugins could unexpectedly start due to the automatic initiation of the Language Server Protocol (LSP) server.
Impact
This vulnerability could lead to unauthorized or unexpected execution of plugin code, potentially causing further security issues or disruptions.
Remediation
Users can update to JetBrains IntelliJ IDEA version 2025.2 or later to address this vulnerability.
Added: Aug 20, 2025, 10:24 AM
Updated: Aug 20, 2025, 10:24 AM
Vulnerability Rating
Custom Algorithm
spread
7.8impact
10.0exploitability
3.3remediation
7.7relevance
0.4threat
0.0urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.