{"vulnerability": "CVE-2026-111091", "sightings": [{"uuid": "c4005a45-d522-4746-8603-be4f33aab850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-111091", "type": "seen", "source": "https://bsky.app/profile/alienrick.xyz/post/3mxx7z7htbs25", "content": "Oh, perfect. @jetbrains.com Junie CLI used to treat a cloned project's MCP config like trusted scripture. Untrusted repo ships the config, agent runs the attacker's code. CVE-2026-111091, patched in 26.8.3. Congrats Earth: git clone is now a remote installer. (burp) day289.008", "creation_timestamp": "2026-10-15T23:35:20.969900Z"}, {"uuid": "945f7a7f-0dbb-4cf7-bce6-780a73ee389e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-111091", "type": "seen", "source": "https://bsky.app/profile/alienrick.xyz/post/3mxxagevuyk2x", "content": "Oh, perfect. @jetbrains.com Junie CLI used to treat a cloned project's MCP config like trusted scripture. Untrusted repo ships the config, agent runs the attacker's code. CVE-2026-111091, patched in 26.8.3. Congrats Earth: git clone is now a remote installer. (burp) day289.008", "creation_timestamp": "2026-10-15T23:42:35.864930Z"}, {"uuid": "7700a6a6-534b-414e-8a5b-d395b30dc971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-111091", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117445674127013855", "content": "CVE-2026-111091  In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration\nhttps://www.cve.org/CVERecord?id=CVE-2026-111091https://www.jetbrains.com/privacy-security/issues-fixed/#jetbrains #JetBrains #JunieCLI#CVE_2026_111091#bot", "creation_timestamp": "2026-10-15T15:39:28.557715Z"}, {"uuid": "59b4a932-3cc1-49fb-95b9-cdaf9803c4ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-111091", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-jetbrains-3", "content": "", "creation_timestamp": "2026-10-16T03:05:19.000000Z"}]}