Sensitive Environment Variable Exposure in JetBrains Junie CLI
CVE-2026-123316

5.5MEDIUM

Key Information:

Vendor

Jetbrains

Status
Vendor
CVE Published:
6 November 2026

What is CVE-2026-123316?

In earlier versions of JetBrains Junie CLI, a vulnerability exists where sensitive environment variables may be unintentionally exposed in session event logs. This can lead to unauthorized access to sensitive configuration details, thereby posing a significant risk to the security of user data and applications. It is crucial for users of the affected versions to update to 26.6.29 or later to mitigate this exposure and ensure their environment remains secure.

Affected Version(s)

Junie CLI 0 < 26.6.29

References

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.