AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

JetBrainsCVE-2026-117530

JetBrains Junie CLI: incomplete denylist

JetBrains

CVE-2026-117530 · Published Oct 27, 2026

Medium6.7
Fix: upgrade to 26.8.17 or later
JetBrains advisory

In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of allowlisted commands

Affected versions

PackageAffectedFixed in
Junie CLI
Product
< 26.8.1726.8.17
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-184

More JetBrains advisories

All JetBrains
Medium 4.3Oct 1JetBrains YouTrack: missing authorizationCVE-2026-103495fixed in 2026.2.19422Medium 5.4Oct 1JetBrains YouTrack: insecure direct object referenceCVE-2026-103496fixed in 2026.2.19422Medium 5.5Oct 1JetBrains YouTrack: server-side request forgeryCVE-2026-103497fixed in 2026.2.19422Low 2.0Oct 1JetBrains YouTrack: cross-site scriptingCVE-2026-103489fixed in 2026.2.19422High 7.2Oct 1JetBrains YouTrack: privilege escalationCVE-2026-103490fixed in 2026.2.19422Medium 6.5Oct 1JetBrains YouTrack: insecure direct object referenceCVE-2026-103491fixed in 2026.2.19422