CLion code execution in Safe Mode via crafted GDB server debug profile

Opening a rigged settings file in this C++ tool can get your PC hacked.

Summary

A flaw in JetBrains CLion lets a crafted GDB server debug profile run code, even in Safe Mode. Versions before 2026.3 and before 2026.2.4.1 are affected.

Affected when

Safe Mode
crafted GDB server debug profile

What to do

Update CLion to 2026.3 or 2026.2.4.1 or later.

Products and platforms

Windows
macOS
Linux
JetBrains CLion

CVE IDs

CVE-2026-123276 (opens in a new tab)

Sources

CVE record: cve.org (opens in a new tab)

Times

First published 2026-11-06 10:27 UTC

First seen 2026-11-09 17:40 UTC