Code Execution Vulnerability in JetBrains Junie CLI
CVE-2026-111091

7.8HIGH

Key Information:

Vendor

Jetbrains
Status
Junie Cli
Vendor
CVE Published:
15 October 2026

What is CVE-2026-111091?

A vulnerability in JetBrains Junie CLI prior to version 26.8.3 allows for code execution through improper handling of untrusted project configurations on the MCP server. This flaw can potentially enable attackers to execute arbitrary code, leading to significant security risks for users of the software.

Affected Version(s)

Junie CLI 0 < 26.8.3

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.