AdvisoriesToolsStatsChecklistSubmitGet the email
← All advisories
CVE-2026-123316mediumBroken access control2026-11-06

CVE-2026-123316: In JetBrains Junie CLI before 26.6.29 sensitive environment variables were exposed in session event logs

In JetBrains Junie CLI before 26.6.29 sensitive environment variables were exposed in session event logs

01.

What it is

In JetBrains Junie CLI before 26.6.29 sensitive environment variables were exposed in session event logs

02.

How to check

  1. Affected: JetBrains Junie CLI before 26.6.29.
  2. Check your installed Junie CLI version.
03.

How to fix

  1. Update JetBrains Junie CLI to 26.6.29 or later.
  2. Rotate any secrets that were in the environment of earlier Junie CLI sessions if their session event logs were shared or stored.
04.

Sources

More advisories for this tool
The weekly email

One email a week. Only what changed.

Every new security hole in AI coding tools, MCP servers, app builders and the stacks they generate (Next.js, Supabase, Node, PHP), each with how to check your app and the fix. No roundups of things you already read.

Free, one email a week. Read the latest issue first if you like. One-click unsubscribe in every email. We never sell or share addresses.