CVE-2026-123851: Security vulnerability

Published Nov 6, 2026

Updated

In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters

Event History

Nov 6, 2026

CVE Published

via MITRE·04:10 PM

Data Sourced

via MITRE·04:10 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What input would an attacker need to control to exploit this issue?

The attacker would need to supply content processed by the Junie GitHub Action that contains HTML-encoded characters, allowing prompt injection protection to be bypassed.

Which deployments are affected?

JetBrains Junie GitHub Action versions before 1.6.4 are affected.

What is the remediation?

Update the JetBrains Junie GitHub Action to version 1.6.4 or later.

CVE-2026-123851: Security vulnerability

Event History

Frequently Asked Questions

What input would an attacker need to control to exploit this issue?

Which deployments are affected?

What is the remediation?

Company

Resources

Contact

Frequently Asked Questions

What input would an attacker need to control to exploit this issue?

Which deployments are affected?

What is the remediation?