CVE-2026-123832

Summary

In JetBrains CLion before 2026.2, an attacker could trigger code execution in Safe Mode by providing a malicious JSON compilation database file, bypassing intended protections meant to restrict unsafe operations during safe startup.

Exploitability

Exploitation requires user interaction (e.g., opening a project with a crafted compilation database) and relies on Safe Mode being active but insufficiently hardened against JSON-based input processing.

Blast radius

Successful exploitation could lead to full compromise of the host running CLion, including theft of credentials, code, or sensitive project data, and potential lateral movement if the IDE has access to internal systems.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to CLion 2026.2 or later, which patches the vulnerability by restricting JSON compilation database processing in Safe Mode.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.