AdvisoriesToolsStatsChecklistSubmitGet the email
← All advisories
CVE-2026-111091highCode execution2026-10-15

CVE-2026-111091: JetBrains Junie CLI ran code from an untrusted project’s MCP config

Opening an untrusted project in Junie CLI before 26.8.3 could run code through the MCP server configuration that came with the project.

01.

What it is

JetBrains, via NVD: “In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project’s MCP server configuration.”

The CVSS vector is local with user interaction required: the victim has to run Junie CLI in a project the attacker controls, such as a cloned repository.

JetBrains hasn’t published more technical detail. It’s the same pattern seen in other agents that start MCP servers declared inside a repo.

02.

How to check

  1. Affected: Junie CLI below 26.8.3.
  2. Look for MCP server config files in repositories you’ve opened with Junie CLI but didn’t write yourself.
03.

How to fix

  1. Update Junie CLI to 26.8.3 or later.
  2. Review a cloned repo’s MCP configuration before running any coding agent in it.
04.

Sources

The weekly email

One email a week. Only what changed.

New advisories, CVEs and fixes for Lovable, Bolt, v0, Replit, Base44 and Cursor apps. No roundups of things you already read.

Free. The list is new, so the first issues go out once there are readers. Unsubscribe from any email in one click. We never sell or share addresses.