Back Cybersecuritynews

Spring CLI Tool Vulnerability Enables Command Execution on the Users Machine

Cybersecuritynews •Abinaya • January 14, 2026

A command injection vulnerability in the Spring CLI VSCode extension poses a security risk to developers still using the outdated tool. The flaw, tracked as CVE-2026-22718, enables attackers to execute arbitrary commands on affected machines, resulting in a medium-severity impact. The vulnerability affects Spring CLI VSCode Extension version 0.9.0 and earlier. Despite reaching end-of-life on […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Spring CLI Tool Vulnerability Enables Command Execution A command injection vulnerability in the Spring CLI VSCode extension allows attackers to execute arbitrary commands on affected machines. This flaw, tracked as CVE-2026-22718, impacts developers using version 0.9.0 and earlier of the tool, which has reached its end-of-life. The vulnerability is categorized with a medium severity level. 3 sources 26

Extracted Entities

CVEs (1)

CVE-2026-22718