CVE-2026-123315
Received
Received - Intake
Command Execution in JetBrains Junie CLI
Vulnerability report for CVE-2026-123315, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-11-06
Last updated on: 2026-11-06
Assigner: JetBrains s.r.o.
Description
Description
In JetBrains Junie CLI before 26.8.24 command execution was possible via the Allow Similar Commands option
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-625 | The product uses a regular expression that does not sufficiently restrict the set of allowed values. |