CVE-2026-123831
CriticalCVSS 9.6Summary
In JetBrains CLion before 2026.2 and 2026.1.4, code execution was possible in Safe Mode via Meson project settings. The flaw bypasses Safe Mode protections.
Risk Assessment
Crafted Meson project settings may allow arbitrary code execution in the developer environment, risking workstation and project data compromise.
Recommendation
Upgrade JetBrains CLion to version 2026.2 or 2026.1.4 (or later). Open Meson projects only from trusted sources.
Other vulnerabilities in JetBrains CLion
See all- CVE-2026-123277Medium
In JetBrains CLion before 2026.3 and 2026.2.4.1, missing authentication allowed local users to obtain the debug session environment on Linux.
- CVE-2026-123276High
In JetBrains CLion before 2026.3 and 2026.2.4.1, code execution was possible in Safe Mode via a crafted GDB server debug profile.
- CVE-2026-123832Critical
In JetBrains CLion before 2026.2, code execution was possible in Safe Mode via a JSON compilation database. The flaw allows arbitrary code to run despite Safe Mode being enabled.
Original NVD description (English source)
In JetBrains CLion before 2026.2, 2026.1.4 code execution was possible in Safe Mode via Meson project settings
Vulnerability data from NVD (NIST) · CISA KEV · EPSS