CVE-2026-123277 · Other
NO FIX YET · SEE WHAT TO DO
In JetBrains CLion before 2026.3 and 2026.2.4.1, a flaw in the debugger lets a local user obtain the debug session environment on Linux. The sources do not say what the environment contains beyond that.
first public Nov 6, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Only CLion users on Linux are named in the sources, and only where another local user shares the machine. Exposure depends on whether the debug session environment holds sensitive values, which the sources do not say.
Not affected if non-linux, single-user-machine
Who cares clion, jetbrains, linux
2026.3 on the 2026.2.x line below 2026.2.4.1 are in scope.2026.3 or 2026.2.4.1, the versions named in the advisory text.In JetBrains CLion before 2026.3, 2026.2.4.1 missing authentication allowed local users to obtain the debug session environment on Linux
This page as .md · .json · CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:L
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.