CVE-2026-123276: High severity vulnerability

Published Nov 6, 2026

Updated

In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug profile

Event History

Nov 6, 2026

CVE Published

via MITRE·10:27 AM

Data Sourced

via MITRE·10:27 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

Users of JetBrains CLion versions before 2026.2.4.1 who use Safe Mode and open or use a crafted GDB server debug profile are exposed.

What does exploitation require?

The attacker needs to provide a crafted GDB server debug profile and rely on user interaction. The CVSS vector indicates local attack access, no privileges required, and required user interaction.

Is Safe Mode sufficient protection?

No. Code execution was possible in Safe Mode through a crafted GDB server debug profile in affected versions.

How can this be remediated?

Update CLion to version 2026.2.4.1 or later. The issue affects versions before that release.

CVE-2026-123276: High severity vulnerability

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does exploitation require?

Is Safe Mode sufficient protection?

How can this be remediated?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does exploitation require?

Is Safe Mode sufficient protection?

How can this be remediated?