In JetBrains Junie CLI before 26.6.29 sensitive environment variables were exposed in session event logs
Product
JetBrains Junie CLI vulnerabilities
4 published CVES affecting JetBrains Junie CLI, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 4
- Critical
- 0
- High
- 2
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest JetBrains Junie CLI CVEs
Newest publication first
-
MediumCVSS 5.5 EPSS 0.43%
-
HighCVSS 7.0 EPSS 0.27%
In JetBrains Junie CLI before 26.8.24 command execution was possible via the Allow Similar Commands option
-
MediumCVSS 6.7 EPSS 0.11%
In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of allowlisted commands
-
HighCVSS 7.8 EPSS 0.14%
In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.