Command Execution Vulnerability in JetBrains Junie CLI Software
CVE-2026-123315

7HIGH

Key Information:

Vendor

Jetbrains
Status
Junie Cli
Vendor
CVE Published:
6 November 2026

What is CVE-2026-123315?

A vulnerability exists in JetBrains Junie CLI prior to version 26.8.24, which allows attackers to execute arbitrary commands through the 'Allow Similar Commands' option. This flaw represents a significant risk, as it can be exploited to compromise systems that utilize this software, leading to unauthorized access and potential data breaches.

Affected Version(s)

Junie CLI 0 < 26.8.24

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.