CVE-2026-65908

PyCharm Professional Edition and 2 others: In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable…

CVE-2026-65908 is fixed in PyCharm on 2 platforms, first by PyCharm 2026.1.4, released July 2, 2026. 4 other affected products have no fix yet. It is not reported as exploited. Patch Radar priority: High.

HighFixed on 2 platforms
CVSS
8.6
No vendor severity
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0019
8th percentile

In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrusted project open

Where it's fixed

ProductFixed inFixReleased
Windows apps
PyCharm 2026.1.4 PyCharm 2026.1.4 Jul 3, 2026
macOS
PyCharm 2026.1.4 PyCharm 2026.1.4 Jul 2, 2026
No fix yet
PyCharm (EAP) (Windows apps) No fix yet no-fix n/a
PyCharm Community Edition (Windows apps) No fix yet no-fix n/a
PyCharm Professional Edition (Windows apps) No fix yet no-fix n/a
PyCharm Professional Edition (EAP) (Windows apps) No fix yet no-fix n/a

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.