In JetBrains PyCharm prior to 2026.1.4 and 2026.2, an attacker can supply a malicious Python executable within an untrusted project, causing the interpreter to run the file. The flaw allows the attacker to execute code with the privileges of the user who opens the project, leading to full system compromise. The weakness is classified as CWE‑829, indicating misuse of file or directory access controls.

JetBrains PyCharm, previous releases before 2026.1.4 and before 2026.2. Users running these versions are vulnerable; only versions 2026.1.4 onward and 2026.2 and later contain the fix.

The CVSS score of 8.6 reflects high severity. EPSS is less than 1 %, meaning very low probability of being targeted currently, and the flaw is not listed in CISA KEV. The likely attack vector is that a malicious project containing a specially crafted Python executable can be opened by a user, triggering the interpreter to execute the payload. No authentication or network access is required; the vulnerability is exploited locally when the user opens the untrusted project.