Spring CLI Tool Vulnerability Enables Command Execution on User Machines

Cyberpress • January 14, 2026

The flaw , tracked as CVE-2026-22718, affects all versions through 0.9.0 and poses a significant security risk for developers who are still relying ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Spring CLI Tool Vulnerability Enables Command Execution A command injection vulnerability in the Spring CLI VSCode extension allows attackers to execute arbitrary commands on affected machines. This flaw, tracked as CVE-2026-22718, impacts developers using version 0.9.0 and earlier of the tool, which has reached its end-of-life. The vulnerability is categorized with a medium severity level. 3 sources 26

Extracted Entities

CVEs (1)

CVE-2026-22718

Platforms (1)

Spring