A command injection vulnerability in the Spring CLI VSCode extension poses a security risk to developers still using the outdated tool. The flaw, tracked as CVE-2026-22718, enables attackers to execute arbitrary commands on affected machines, resulting in a medium-severity impact. The vulnerability affects Spring CLI VSCode Extension version 0.9.0 and earlier. Despite reaching end-of-life on […]
The post Spring CLI Tool Vulnerability Enables Command Execution on the Users Machine appeared first on Cyber Security News.
This article has been indexed from Cyber Security News
Read the original article: