{"id":"CVE-2026-123832","kind":"vulnerability","aliases":["CVE-2026-123832"],"related":[],"title":"JetBrains CLion: code runs in Safe Mode via JSON compilation database","description":"In JetBrains CLion before 2026.2 code execution was possible in Safe Mode via JSON compilation database","summary":"In JetBrains CLion before 2026.2, a crafted JSON compilation database can make the IDE execute code even when Safe Mode is on. An attacker who gets a developer to open a malicious project could run commands as that developer.","severity":"critical","cvss":9.6,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["c++","clion","jetbrains","package"],"not_affected_if":["clion-2026.2-or-later","trusted-projects-only"],"how_to_check":"- Check the installed CLion version in Help > About (unknown exact path in sources)\n- Look for CLion versions below `2026.2`","fix":"- JetBrains CLion: upgrade to `2026.2` or later","status":"open","published_at":"2026-11-06T17:17:21+00:00","first_seen_at":"2026-11-06T17:43:12+00:00","triaged_at":"2026-11-06T17:44:49+00:00","updated_at":"2026-11-06T17:44:49+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-11-06T17:44:49Z","model":"claude-haiku-5-5","output":{"fix":"- JetBrains CLion: upgrade to `2026.2` or later","reach":"local","title":"JetBrains CLion: code runs in Safe Mode via JSON compilation database","impact":"high","summary":"In JetBrains CLion before 2026.2, a crafted JSON compilation database can make the IDE execute code even when Safe Mode is on. An attacker who gets a developer to open a malicious project could run commands as that developer.","audience":"developers","category":"package","nicknames":[],"who_cares":["clion","jetbrains","c++"],"confidence":0.6,"fix_status":"available","needs_auth":"no","worst_case":"Code runs as the developer on their machine","analyst_note":"Confirm the trigger (opening a project vs. a specific action) and the exact affected version range from the JetBrains advisory or NVD entry.","how_to_check":"- Check the installed CLion version in Help > About (unknown exact path in sources)\n- Look for CLion versions below `2026.2`","plain_action":"","needs_analyst":true,"not_affected_if":["clion-2026.2-or-later","trusted-projects-only"],"who_is_affected":"Developers who open untrusted CLion projects or compilation databases on a CLion build before 2026.2. Sources do not say which project setups beyond the JSON compilation database trigger it. Teams that only open their own trusted projects are at lower risk.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000674,"input_tokens":4162,"output_tokens":516,"severity_before":"critical"},"analyst_status":null,"analyst_note":null,"search":"'-123832':14A,17A '-2026':13A,16A '2026.2':26B,65C 'attack':45B 'c':18B 'clion':2A,19B,24B,63C 'code':3A,37B,66C 'command':57B 'compil':10A,30B,75C 'could':55B 'craft':28B 'cve':12A,15A 'databas':11A,31B,76C 'develop':49B,60B 'even':38B 'execut':36B,67C 'get':47B 'ide':35B 'jetbrain':1A,20B,23B,62C 'json':9A,29B,74C 'make':33B 'malici':53B 'mode':7A,41B,72C 'open':51B 'packag':21B 'possibl':69C 'project':54B 'run':4A,56B 'safe':6A,40B,71C 'via':8A,73C","nicknames":[],"mitigations":[],"who_affected":"Developers who open untrusted CLion projects or compilation databases on a CLion build before 2026.2. Sources do not say which project setups beyond the JSON compilation database trigger it. Teams that only open their own trusted projects are at lower risk.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"pkeys":[],"ptokens":[],"labels":["c","clion","critical","jetbrains","package"],"campaign_type":null,"search_a":"'-123832':14A,17A '-2026':13A,16A 'clion':2A 'code':3A 'compil':10A 'cve':12A,15A 'databas':11A 'jetbrain':1A 'json':9A 'mode':7A 'run':4A 'safe':6A 'via':8A","search_b":"'2026.2':26B 'attack':45B 'c':18B 'clion':19B,24B 'code':37B 'command':57B 'compil':30B 'could':55B 'craft':28B 'databas':31B 'develop':49B,60B 'even':38B 'execut':36B 'get':47B 'ide':35B 'jetbrain':20B,23B 'json':29B 'make':33B 'malici':53B 'mode':41B 'open':51B 'packag':21B 'project':54B 'run':56B 'safe':40B","search_c":"'2026.2':65C 'clion':63C 'code':66C 'compil':75C 'databas':76C 'execut':67C 'jetbrain':62C 'json':74C 'mode':72C 'possibl':69C 'safe':71C 'via':73C","first_public_at":"2026-11-06T17:17:21+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss_by":"cve@jetbrains.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-123832","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123832","severity":null,"published_at":"2026-11-06T17:17:21+00:00","modified_at":"2026-11-06T17:17:21+00:00","first_seen_at":"2026-11-06T17:43:12+00:00","fetched_at":"2026-11-06T17:43:12+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}