JetBrains discloses code execution via unauthenticated Jupyter MCP tools in PyCharm before 2026.2.1
JetBrains published CVE-2026-75060 on 2026-08-17 as the CNA for its own products. The record states that in PyCharm before 2026.2.1, code execution was possible via unauthenticated Jupyter MCP tools, and rates it 8.4 high on CVSS 3.1 with no privileges and no user interaction required. JetBrains published no further technical detail beyond the one-line description and its fixed-issues page.
JetBrains published CVE-2026-75060 on 2026-08-17, acting as the CNA for its own products. The record is one sentence long: in PyCharm before 2026.2.1, code execution was possible via unauthenticated Jupyter MCP tools.
The assigned CVSS 3.1 vector is
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, scoring 8.4 high. Read against
the description, it says the tools were reachable locally without
privileges or user interaction, and that reaching them cost the host
confidentiality, integrity and availability. NVD classifies the record
under CWE-306, missing authentication for a critical function. Every
PyCharm build below 2026.2.1 is marked affected.
JetBrains has published nothing further. The record's only reference is the company's fixed-issues page, and neither the record nor NVD names the tool set, the transport it was served over, or how the Jupyter integration exposed it. What the vendor has committed to in public is the fixed version.
How was this verified, and what are the sources?
Published · last verified · confidence 1.00.
- CVE-2026-75060 record at cveawg.mitre.org (assigner JetBrains, reserved and published 2026-08-17, updated 2026-08-18) - "In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools"; affected PyCharm versions below 2026.2.1 with default status unaffected; CVSS 3.1 8.4 high (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H); sole reference is jetbrains.com/privacy-security/issues-fixed/ - accessed
- NVD record for CVE-2026-75060 (published 2026-08-17, source cve@jetbrains.com, CWE-306 Missing Authentication for Critical Function) - carries the same description and CVSS vector - accessed