CVE-2026-123832
CriticalCVSS 9.6Summary
In JetBrains CLion before 2026.2, code execution was possible in Safe Mode via a JSON compilation database. The flaw allows arbitrary code to run despite Safe Mode being enabled.
Risk Assessment
An attacker able to supply a crafted JSON compilation database can execute arbitrary code in the IDE user's context, leading to compromise of the development environment.
Recommendation
Upgrade JetBrains CLion to version 2026.2 or later. Avoid opening untrusted projects and JSON compilation databases.
Other vulnerabilities in JetBrains CLion
See all- CVE-2026-123277Medium
In JetBrains CLion before 2026.3 and 2026.2.4.1, missing authentication allowed local users to obtain the debug session environment on Linux.
- CVE-2026-123276High
In JetBrains CLion before 2026.3 and 2026.2.4.1, code execution was possible in Safe Mode via a crafted GDB server debug profile.
- CVE-2026-123831Critical
In JetBrains CLion before 2026.2 and 2026.1.4, code execution was possible in Safe Mode via Meson project settings. The flaw bypasses Safe Mode protections.
Original NVD description (English source)
In JetBrains CLion before 2026.2 code execution was possible in Safe Mode via JSON compilation database
Vulnerability data from NVD (NIST) · CISA KEV · EPSS