CVE-2026-123276
HighCVSS 7.8Summary
In JetBrains CLion before 2026.3 and 2026.2.4.1, code execution was possible in Safe Mode via a crafted GDB server debug profile.
Risk Assessment
A person able to supply a crafted debug profile can execute code despite Safe Mode being enabled, undermining the security assumptions of that mode.
Recommendation
Upgrade JetBrains CLion to version 2026.3 or 2026.2.4.1 (or later) and avoid opening untrusted GDB debug profiles.
Other vulnerabilities in JetBrains CLion
See all- CVE-2026-123277Medium
In JetBrains CLion before 2026.3 and 2026.2.4.1, missing authentication allowed local users to obtain the debug session environment on Linux.
- CVE-2026-123832Critical
In JetBrains CLion before 2026.2, code execution was possible in Safe Mode via a JSON compilation database. The flaw allows arbitrary code to run despite Safe Mode being enabled.
- CVE-2026-123831Critical
In JetBrains CLion before 2026.2 and 2026.1.4, code execution was possible in Safe Mode via Meson project settings. The flaw bypasses Safe Mode protections.
Original NVD description (English source)
In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug profile
Vulnerability data from NVD (NIST) · CISA KEV · EPSS