CVE-2022-24346

HIGH7.8Published on February 25, 2022

In JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO (Right-to-Left Override) characters was possible.

CVSS score7.8 / 10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vendorsjetbrains

Affected products

Vendors	Prodotto	Versioni
jetbrains	intellij idea	< 2021.3.1

Git trasformato in una trappola: sette agenti AI possono eseguire codice dai repository

Vulnerabilities

Git Turned into a Trap: Seven AI Agents Can Execute Code from Repositories

Seven AI coding agents execute attacker code via malicious Git core.fsmonitor config when auto-running git status, bypassing trust and sandbox controls.

Sep 3, 20266 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

Git Turned into a Trap: Seven AI Agents Can Execute Code from Repositories