This vulnerability allows an attacker to execute arbitrary commands by leveraging the "Allow Similar Commands" option in JetBrains Junie CLI. The flaw arises from insufficient validation of command options, enabling untrusted input to be run as system commands. The impact is the potential compromise of confidentiality, integrity, and availability of the host system where the CLI runs, as the attacker could execute any command with the privileges of the user launching the tool.

JetBrains Junie CLI versions prior to 26.8.24 are affected. The issue is specific to the Junie CLI component provided by JetBrains. All installations using the vulnerable CLI that expose the "Allow Similar Commands" option are at risk.

The CVSS score of 7 indicates a high severity. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog, suggesting that large‑scale exploitation has not yet been observed. Nevertheless, the flaw can be exploited if the CLI is invoked with user-controlled arguments; local attackers with shell access or remote users with direct CLI access could trigger the vulnerability. The attack vector likely requires the attacker to run the program or to supply crafted arguments through the option, which may be available in shared or exposed environments.