CVE-2026-22718

CVSS Score & Metrics

Base Score

6.8 / 10

Vector String

                                        CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L                                    

The VSCode extension for Spring CLI are vulnerable to command injection, resulting in command execution on the users machine.

Published Date

January 14, 2026

Last Modified

January 14, 2026

CWE ID

CWE-78

Source

NVD