What happened
CVE-2026-75060, published 2026-08-17 by JetBrains, fixes a missing-authentication flaw in PyCharm's Jupyter/MCP tooling that allowed unauthenticated code execution — the MCP layer connecting the IDE's AI/agent tooling to Jupyter kernels did not enforce authentication on tool invocation.
Why it matters
PyCharm is one of the most widely deployed Python IDEs, and its MCP-based Jupyter integration is used by AI coding-assistant features; unauthenticated code execution through this surface directly compromises developer workstations running data science and ML workloads.
Attack vector
Missing authentication for a critical function (CWE-306) in PyCharm's Jupyter MCP tool integration allows a local/network attacker to invoke Jupyter MCP tools without authentication, resulting in arbitrary code execution in the context of the IDE user (CVSS v3.1 8.4 High, CVSS v4 9.3 Critical, no privileges or user interaction required).
Affected systems
JetBrains PyCharm before 2026.2.1
Mitigation
Upgrade PyCharm to 2026.2.1 or later per JetBrains security advisory.