CVE Field Guide
About Us
CVE-2026-41153
PUBLISHED
Assigner:
JetBrains
Reserved:
17.04.2026
Published:
17.04.2026
Updated:
17.04.2026
In JetBrains Junie before 252.549.29 command execution was possible via malicious project file
Metrics
CVSS 3.1
CVSS Vector:
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L
CVSS Score:
5.8
CVSS score
5.8
Attack Vector
Local
Scope
Unchanged
Attack Complexity
High
Confidentiality Impact
High
Privileges Required
None
Integrity Impact
Low
User Interaction
Required
Availability Impact
Low
CVSS 3.1
Product Status
Vendor
JetBrains
Product
Junie
Versions
Default:
unaffected
affected from 0 to 252.549.29 (excl.)
References
https://www.jetbrains.com/privacy-security/issues-fixed/
Problem Types
CWE-77