CVE-2026-64806

HIGH

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpreter

StatusUndergoing Analysis

설명

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpreter

Score Summary

CVSS Score: 8.4
Version: 3.1
VPI: 84
Why this VPI (explainable, experimental)
VPI breakdown
Impact 84.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 84.00
VPI formula vpi-v1
EPSS: 0.1%
(상위 3.76%)
Attack Vector: Local Access
Low Complexity
No Privileges
No User Interaction
Scope Unchanged
High Confidentiality Impact
High Integrity Impact
High Availability Impact

Details

CWE Weakness Classification

References (1)

Impact	84.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	84.00