Spring CLI Tool Vulnerability Enables Command Execution on the Users Machine

A command injection vulnerability in the Spring CLI VSCode extension poses a security risk to developers still using the outdated tool. The flaw, tracked as CVE-2026-22718, enables attackers to execute arbitrary commands on affected machines, resulting in a medium-severity impact. The vulnerability affects Spring CLI VSCode Extension version 0.9.0 and earlier. Despite reaching end-of-life on […]

The post Spring CLI Tool Vulnerability Enables Command Execution on the Users Machine appeared first on Cyber Security News.