CVE-2026-64806

CVSS Score & Metrics

Base Score

8.4 / 10

Vector String

                                        CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H                                    

In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpreter

Published Date

July 23, 2026

Last Modified

July 23, 2026

CWE ID

CWE-829

Source

NVD

Vendor

JetBrains

Product

WebStorm