JetBrains Junie before version 252.549.29 contains a command execution vulnerability (CWE-77) that can be triggered by opening a maliciously crafted project file. This flaw allows an attacker to execute arbitrary commands on the affected system. The vulnerability has a CVSS 3.1 score of 5.8, reflecting medium severity with local attack vector, high attack complexity, no privileges required, and user interaction needed. No vendor advisory or patch is currently available to address this issue.

Successful exploitation could lead to partial confidentiality loss, limited integrity impact, and limited availability impact due to command execution capabilities. The attack requires local access and user interaction, with high complexity, reducing the likelihood of widespread exploitation. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening project files from untrusted sources and consider restricting local access to the application.