---
id: "CVE-2026-123315"
page: "https://infrastack.ai/live/CVE-2026-123315"
kind: "vulnerability"
aliases: ["CVE-2026-123315"]
title: "JetBrains Junie CLI: Allow Similar Commands option enables command execution"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-coding-agent", "ai-tooling", "jetbrains", "junie-cli"]
not_affected_if: ["junie-cli-not-installed"]
published_at: "2026-11-06T11:17:10+00:00"
first_seen_at: "2026-11-06T11:41:26+00:00"
updated_at: "2026-11-06T11:42:11+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-123315", "first_seen_at": "2026-11-06T11:41:26+00:00"}]
exploit_sources: []
---

# JetBrains Junie CLI: Allow Similar Commands option enables command execution

Link for people: https://infrastack.ai/live/CVE-2026-123315 (this .md is for agents)

JetBrains Junie CLI, an AI coding agent, could be made to execute commands through its Allow Similar Commands option before version 26.8.24. An attacker who can influence the agent's actions could get commands run on the machine where it runs.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Junie CLI version and compare it with `26.8.24`

## Fix

- JetBrains Junie CLI: `26.8.24` or later

## Timeline

- 2026-11-06T11:41:26+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-123315

## From the sources

In JetBrains Junie CLI before 26.8.24 command execution was possible via the Allow Similar Commands option

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_