In JetBrains IntelliJ IDEA before version 2025.2, improper access control allowed Code With Me guests to discover hidden files. This vulnerability poses a risk to the confidentiality of sensitive information. Users are advised to update to the latest version to mitigate this issue.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-57728 |
Exploitation
To exploit this vulnerability, an attacker could use the Code With Me feature in JetBrains IntelliJ IDEA to gain unauthorized access to hidden files. By inviting themselves as a guest, they could potentially navigate the file system and discover sensitive information that should remain confidential.
Affected Products
- JetBrains IntelliJ IDEA: A popular integrated development environment (IDE) for Java and other programming languages, which allows collaborative coding through the Code With Me feature.
Mitigation
To mitigate this vulnerability, users should upgrade to JetBrains IntelliJ IDEA version 2025.2 or later, where the access control issues have been addressed. Regularly updating software and reviewing access permissions can help prevent similar vulnerabilities in the future.