CVE-2026-117530

1th percentile - higher than 1% of all known CVEs

In JetBrains Junie CLI before version 26.8.17, command execution was possible due to incomplete validation of allowlisted commands. The flaw allows bypassing the allowlist mechanism and running unauthorized commands.

An attacker could exploit this to execute arbitrary commands in the environment where the CLI runs, potentially leading to system compromise or data leakage.

Update JetBrains Junie CLI to version 26.8.17 or later. Until then, restrict access to the tool and avoid running it in highly privileged environments.