Vulnerability Details CVE-2026-64805
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-local package-manager tooling
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 8.9%
CVSS Severity
CVSS v3 Score 8.4
Products affected by CVE-2026-64805
-
cpe:2.3:a:jetbrains:webstorm:-
-
cpe:2.3:a:jetbrains:webstorm:2021.3.1
-
cpe:2.3:a:jetbrains:webstorm:2023.1.0
-
cpe:2.3:a:jetbrains:webstorm:2023.1.1
-
cpe:2.3:a:jetbrains:webstorm:2023.1.2
-
cpe:2.3:a:jetbrains:webstorm:2023.1.3
-
cpe:2.3:a:jetbrains:webstorm:2023.1.4
-
cpe:2.3:a:jetbrains:webstorm:2023.1.5
-
cpe:2.3:a:jetbrains:webstorm:2023.1.6
-
cpe:2.3:a:jetbrains:webstorm:2023.2.0
-
cpe:2.3:a:jetbrains:webstorm:2023.2.1
-
cpe:2.3:a:jetbrains:webstorm:2023.2.2
-
cpe:2.3:a:jetbrains:webstorm:2023.2.3
-
cpe:2.3:a:jetbrains:webstorm:2023.2.4
-
cpe:2.3:a:jetbrains:webstorm:2023.2.5
-
cpe:2.3:a:jetbrains:webstorm:2023.2.6
-
cpe:2.3:a:jetbrains:webstorm:2023.2.7
-
cpe:2.3:a:jetbrains:webstorm:2023.3.0
-
cpe:2.3:a:jetbrains:webstorm:2023.3.1
-
cpe:2.3:a:jetbrains:webstorm:2023.3.2
-
cpe:2.3:a:jetbrains:webstorm:2023.3.3
-
cpe:2.3:a:jetbrains:webstorm:2023.3.4
-
cpe:2.3:a:jetbrains:webstorm:2023.3.5
-
cpe:2.3:a:jetbrains:webstorm:2023.3.6
-
cpe:2.3:a:jetbrains:webstorm:2023.3.7
-
cpe:2.3:a:jetbrains:webstorm:2024.1.0
-
cpe:2.3:a:jetbrains:webstorm:2024.1.1
-
cpe:2.3:a:jetbrains:webstorm:2024.1.2
-
cpe:2.3:a:jetbrains:webstorm:2024.1.3
-
cpe:2.3:a:jetbrains:webstorm:2024.1.4
-
cpe:2.3:a:jetbrains:webstorm:2024.3.0