{"id":"CVE-2026-117530","kind":"vulnerability","aliases":["CVE-2026-117530"],"related":[],"title":"JetBrains Junie CLI: incomplete allowlist check lets commands execute","description":"In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of allowlisted commands","summary":"Junie CLI, JetBrains' AI coding agent, validated allowlisted commands incompletely before version 26.8.17. Per the advisory text, an attacker can get command execution through that gap.","severity":"medium","cvss":6.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-tooling","coding-agent","developer-workstation","jetbrains","junie-cli"],"not_affected_if":["junie-cli-not-installed","version-26.8.17-or-later"],"how_to_check":"- Run `junie --version` (or the equivalent version command for the installed Junie CLI) and compare against `26.8.17`\n- Check the installed Junie CLI package version in the environment where it runs\n- unknown whether the sources give further detail on configuration that enables the allowlist","fix":"- Upgrade JetBrains Junie CLI to `26.8.17` or later\n- unknown whether a workaround exists before upgrading","status":"open","published_at":"2026-10-27T11:17:33+00:00","first_seen_at":"2026-10-27T11:31:28+00:00","triaged_at":"2026-10-27T11:31:58+00:00","updated_at":"2026-10-27T11:31:58+00:00","category":"ai-tooling","confidence":0.6,"triage":{"at":"2026-10-27T11:31:58Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade JetBrains Junie CLI to `26.8.17` or later\n- unknown whether a workaround exists before upgrading","reach":"unknown","title":"JetBrains Junie CLI: incomplete allowlist check lets commands execute","impact":"high","summary":"Junie CLI, JetBrains' AI coding agent, validated allowlisted commands incompletely before version 26.8.17. Per the advisory text, an attacker can get command execution through that gap.","category":"ai-tooling","nicknames":[],"who_cares":["junie-cli","jetbrains","coding-agent","developer-workstation"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Attacker runs arbitrary commands through the Junie CLI agent","analyst_note":"Check the NVD entry and JetBrains security advisory for the exact trigger, whether attacker-controlled input reaches the allowlist, and whether auth or user interaction is required.","how_to_check":"- Run `junie --version` (or the equivalent version command for the installed Junie CLI) and compare against `26.8.17`\n- Check the installed Junie CLI package version in the environment where it runs\n- unknown whether the sources give further detail on configuration that enables the allowlist","needs_analyst":true,"not_affected_if":["junie-cli-not-installed","version-26.8.17-or-later"],"who_is_affected":"Teams running JetBrains Junie CLI before 26.8.17, especially where the agent is allowed to run shell commands from an allowlist. The sources do not describe the exact trigger, so whether an untrusted input can reach the allowlist check is unknown. Teams not using Junie CLI can skip this.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000638,"input_tokens":3263,"output_tokens":624,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-117530':12A,15A '-2026':11A,14A '26.8.17':41B,60C 'advisori':44B 'agent':21B,34B 'ai':17B,32B 'ai-tool':16B 'allowlist':5A,36B,70C 'attack':47B 'check':6A 'cli':3A,28B,30B,58C 'code':20B,33B 'coding-ag':19B 'command':8A,37B,50B,61C,71C 'cve':10A,13A 'develop':23B 'developer-workst':22B 'due':65C 'execut':9A,51B,62C 'gap':54B 'get':49B 'incomplet':4A,38B,67C 'jetbrain':1A,25B,31B,56C 'juni':2A,27B,29B,57C 'junie-c':26B 'let':7A 'per':42B 'possibl':64C 'text':45B 'tool':18B 'valid':35B,68C 'version':40B 'workstat':24B","nicknames":[],"mitigations":[],"who_affected":"Teams running JetBrains Junie CLI before 26.8.17, especially where the agent is allowed to run shell commands from an allowlist. The sources do not describe the exact trigger, so whether an untrusted input can reach the allowlist check is unknown. Teams not using Junie CLI can skip this.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T11:17:33+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss_by":"cve@jetbrains.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-117530","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-117530","severity":null,"published_at":"2026-10-27T11:17:33+00:00","modified_at":"2026-10-27T11:17:33+00:00","first_seen_at":"2026-10-27T11:31:28+00:00","fetched_at":"2026-10-27T11:31:28+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}