CVE-2026-123277
MediumCVSS 5.0Summary
In JetBrains CLion before 2026.3 and 2026.2.4.1, missing authentication allowed local users to obtain the debug session environment on Linux.
Risk Assessment
A local user can access debug session data, potentially exposing sensitive information or enabling further attacks on the host.
Recommendation
Upgrade JetBrains CLion to version 2026.3, 2026.2.4.1, or later.
Other vulnerabilities in JetBrains CLion
See all- CVE-2026-123276High
In JetBrains CLion before 2026.3 and 2026.2.4.1, code execution was possible in Safe Mode via a crafted GDB server debug profile.
- CVE-2026-123832Critical
In JetBrains CLion before 2026.2, code execution was possible in Safe Mode via a JSON compilation database. The flaw allows arbitrary code to run despite Safe Mode being enabled.
- CVE-2026-123831Critical
In JetBrains CLion before 2026.2 and 2026.1.4, code execution was possible in Safe Mode via Meson project settings. The flaw bypasses Safe Mode protections.
Original NVD description (English source)
In JetBrains CLion before 2026.3, 2026.2.4.1 missing authentication allowed local users to obtain the debug session environment on Linux
Vulnerability data from NVD (NIST) · CISA KEV · EPSS