Skip to main content

Junie Cli

1 CVEs product

Monthly

CVE-2026-111091 Oct 15, 15:29 HIGH PATCH This Week

Code execution in JetBrains Junie CLI before 26.8.3 allows an attacker to run arbitrary code via a malicious MCP server configuration embedded in an untrusted project. The victim must open and interact with the project (user interaction required), and local access is necessary, but no privileges are required. No public exploit code has been identified at time of analysis.

RCE JetBrains Junie Cli
NVD
CVSS 3.1
7.8
EPSS
0.1%
EPSS 0% CVSS 7.8
HIGH PATCH This Week

Code execution in JetBrains Junie CLI before 26.8.3 allows an attacker to run arbitrary code via a malicious MCP server configuration embedded in an untrusted project. The victim must open and interact with the project (user interaction required), and local access is necessary, but no privileges are required. No public exploit code has been identified at time of analysis.

RCE JetBrains Junie Cli
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy