CVE-2026-22718 | Spring CLI VSCode Extension up to 0.9.0 os command injection

January 14, 2026 Yanac

A vulnerability classified as critical has been found in Spring CLI VSCode Extension up to 0.9.0. Affected by this vulnerability is an unknown functionality. This manipulation causes os command injection. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is handled as CVE-2026-22718. It is possible to launch the attack on the local host. There is not any exploit available.VulDB Recent EntriesRead More