JetBrains IntelliJ IDEA XXE Vulnerability in UI Designer Form Parser

A vulnerability allowing XML External Entity (XXE) processing has been identified in JetBrains IntelliJ IDEA versions prior to 2026.1. This issue arises in the UI Designer form parser, where improper handling of XML data can be exploited.

Impact

Exploitation of this vulnerability could lead to an XXE attack, where an attacker can manipulate XML input to access internal files or services, potentially causing a denial-of-service condition.

Remediation

Users can update to JetBrains IntelliJ IDEA version 2026.1.1 or later, where this vulnerability has been fixed.