{"id":"CVE-2026-123831","published":"2026-11-06T17:17:21.240","lastModified":"2026-11-07T05:18:15.857","description":"In JetBrains CLion before 2026.2, \n2026.1.4 code execution was possible in Safe Mode via Meson project settings","cvssScore":9.6,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwes":["CWE-829"],"vendors":[],"products":[],"references":[{"url":"https://www.jetbrains.com/privacy-security/issues-fixed/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"In JetBrains CLion before 2026.2, a code execution flaw (CWE-829) allowed attackers to execute arbitrary code in Safe Mode by manipulating Meson project settings, bypassing intended safety restrictions.","exploitability":"Exploitation requires user interaction (e.g., opening a malicious project or accepting unsafe project settings) and only affects CLion instances configured to run in Safe Mode with Meson support enabled.","blast_radius":"Successful exploitation could lead to full system compromise, including data theft, malware deployment, or lateral movement within the developer’s environment.","remediation":"Upgrade to CLion 2026.2 or later, or apply patch level 2026.1.4 if already on the 2026.1.x series.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","safe-mode-bypass","meson","ide-vulnerability"],"model":"garnet-coder","analyzedAt":"2026-11-07T09:57:44.925Z"}}