CVE-2026-123277: Medium severity vulnerability

Published Nov 6, 2026

Updated

In JetBrains CLion before 2026.3, 2026.2.4.1 missing authentication allowed local users to obtain the debug session environment on Linux

Event History

Nov 6, 2026

CVE Published

via MITRE·10:27 AM

Data Sourced

via MITRE·10:27 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

The issue affects CLion installations on Linux in versions before the listed fixed releases, 2026.3 and 2026.2.4.1. It is a local issue, so systems without untrusted local users have a narrower exposure.

What does an attacker need to exploit it?

An attacker needs local access, low-level privileges, and user interaction. The CVSS vector also rates attack complexity as high.

What is the potential impact?

Successful exploitation can expose the debug session environment. The supplied CVSS vector indicates high confidentiality impact, no integrity impact, and low availability impact.

CVE-2026-123277: Medium severity vulnerability

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the potential impact?