In JetBrains IntelliJ IDEA before 2025.2, improper access control allowed Code With Me guests to discover hidden files. This vulnerability can lead to unauthorized access to sensitive information. Users are advised to update their software to mitigate this risk.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-57728 |
Exploitation
To exploit this vulnerability, an attacker could use the Code With Me feature in IntelliJ IDEA to gain access to hidden files that should not be visible to guests. This requires no special privileges or user interaction, making it relatively easy to execute.
Affected Products
- JetBrains IntelliJ IDEA: A popular integrated development environment (IDE) that allows developers to write and manage code efficiently.
Mitigation
Users should update to the latest version of JetBrains IntelliJ IDEA to ensure that this vulnerability is patched. Regularly checking for updates and applying them promptly can help protect against such security issues.