JetBrains IntelliJ IDEA before 2026.1 contains a template injection flaw in the Copyright plugin that permits execution of arbitrary code, identified as CWE-1336. The vulnerability can compromise the confidentiality, integrity, and availability of the host system by granting attackers the ability to run malicious payloads within the IDE environment.

The flaw affects JetBrains IntelliJ IDEA versions earlier than 2026.1. No other products or vendors are listed in the advisory.

The CVSS score of 4.5 indicates moderate severity and the EPSS score is not available; the issue is not listed in the CISA KEV catalog. Because template injection requires the ability to supply malicious template data, the likely attack vector is local or relies on the deployment of a tampered plugin or user interaction. An attacker who can influence the template content can trigger code execution through the vulnerable plugin.