Command Execution Flaw in JetBrains Junie CLI
CVE-2026-117530

6.7MEDIUM

Key Information:

Vendor

Jetbrains
Status
Junie Cli
Vendor
CVE Published:
27 October 2026

What is CVE-2026-117530?

In JetBrains Junie CLI prior to version 26.8.17, a security issue allows for command execution due to inadequate validation of allowlisted commands. This vulnerability could enable attackers to execute unauthorized commands, impacting the security of the affected systems. Users are advised to upgrade to the latest version to mitigate any potential risks.

Affected Version(s)

Junie CLI 0 < 26.8.17

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.