Description
In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates
Published: 2026-11-06
Score: 7.4 High
EPSS: n/a
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 07 Nov 2026 07:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 06 Nov 2026 22:00:00 +0000

Type Values Removed Values Added
First Time appeared Jetbrains
Jetbrains junie Github Action
Vendors & Products Jetbrains
Jetbrains junie Github Action

Fri, 06 Nov 2026 19:15:00 +0000

Type Values Removed Values Added
Title Remote Code Execution via Fork Updates in JetBrains Junie GitHub Action

Fri, 06 Nov 2026 16:30:00 +0000

Type Values Removed Values Added
Description In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates
Weaknesses CWE-863
References
Metrics cvssV3_1

{'score': 7.4, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'}

Subscriptions

Jetbrains Junie Github Action
cve-icon MITRE

Status: PUBLISHED

Assigner: JetBrains

Published:

Updated: 2026-11-06T16:47:00.583Z

Reserved: 2026-11-06T16:05:47.006Z

Link: CVE-2026-123852

cve-icon Vulnrichment

Updated: 2026-11-06T16:46:53.425Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-11-06T17:17:24.283

Modified: 2026-11-06T20:20:05.730

Link: CVE-2026-123852

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-06T21:13:12Z

Weaknesses