CVE-2026-123852: Security vulnerability

Published Nov 6, 2026

Updated

In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade JetBrains Junie GitHub Action to a version that resolves this vulnerability.
Fixed in 1.8.0

Event History

Nov 6, 2026

CVE Published

via MITRE·04:10 PM

Data Sourced

via MITRE·04:10 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments should be prioritized for remediation?

GitHub workflows using the JetBrains Junie GitHub Action before version 1.8.0 should be prioritized, particularly where the workflow processes updates from forks and has workflow credentials available.

What would an attacker need to exploit this issue?

The attacker would need to provide an update through a fork. Under affected versions, this could result in code execution with the workflow's credentials.

What is the available remediation?

Update the JetBrains Junie GitHub Action to version 1.8.0 or later.

CVE-2026-123852: Security vulnerability

Remediation

Event History

Frequently Asked Questions

Which deployments should be prioritized for remediation?

What would an attacker need to exploit this issue?

What is the available remediation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments should be prioritized for remediation?

What would an attacker need to exploit this issue?

What is the available remediation?