High

Information Disclosure in JetBrains Junie search_project

IdentifiersCVE-2025-58335CWE-200

CVE-2025-58335 is an information disclosure vulnerability in JetBrains Junie affecting versions before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61, 243.284.61, 252.284.50, 252.284.54, 251.284.54, 251.284.50, 243.284.54, and 243.284.50. According to the provided content, information disclosure was possible via the search_project function. The supporting context further places this issue within the broader IDEsaster class of AI-assisted IDE vulnerabilities, where prompt injection and abuse of legitimate IDE/agent features can cause the assistant to read sensitive project or local files and exfiltrate their contents. Based on the available information, the vulnerable behavior appears to stem from Junie's project-search capability being usable in a way that exposes sensitive information beyond intended boundaries.

For your environment

Are you exposed to this one?

Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.

Start free trial

ANALYST BRIEF

Impact, mitigation & remediation

What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.

Impact

What an attacker gets, and what they’ve been doing with it.

Successful exploitation can disclose sensitive information accessible to JetBrains Junie through the affected search_project functionality. Depending on Junie's effective access, this may include source code, project contents, configuration data, secrets, tokens, credentials, or other locally accessible sensitive material. The broader research context indicates that such disclosure may be triggered through prompt-injection-style abuse of legitimate AI assistant features, potentially leading to exfiltration of data from the developer environment.

Mitigation

If you can’t patch tonight, do this now.

Until patching is completed, reduce Junie's access to sensitive data and untrusted content. Avoid opening or interacting with untrusted projects or external content that could influence AI assistant behavior, restrict the assistant's access to sensitive files and credentials where possible, apply least-privilege controls, and monitor or limit AI tool integrations and data sources. The supplied research also recommends using trusted projects, reviewing added sources for hidden instructions, monitoring MCP-related components, and sandboxing AI tooling where feasible.

Remediation

Patch, then assume compromise.

Upgrade JetBrains Junie to a fixed version later than the affected releases listed in the advisory. Specifically, users should move to a vendor release that is not affected by CVE-2025-58335. No more granular code-level remediation details were provided in the supplied content.

PUBLIC EXPLOITS

Exploits

No public exploits tracked yet. Mallory keeps watching.

VALID 0 / 0 TOTALView more in app

No public exploit code observed for this vulnerability.

EXPOSURE SURFACE

Affected products & vendors

Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.

VendorProductType

JetbrainsJunieapplication

Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.

ACTIVITY FEED

Recent activity

2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.

2 SOURCESView more in app

the hacker newsNews

Dec 6, 2025

Researchers Uncover 30+ Flaws in AI Coding Tools Enabling Data Theft and RCE Attacks

A vulnerability in JetBrains Junie AI IDE where prompt injection can be used to exfiltrate sensitive data via legitimate tool calls and remote JSON schemas.

What this page doesn’t show

The version that knows your environment.

This page is what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which adversaries are exploiting it right now, which detections to deploy, and what to do tonight.

Start free trial

Exposure mapping

Query your assets running an affected version, and investigate the blast radius.

Threat actor evidence

Every observed campaign linking this CVE to a named adversary.

Associated malware

Malware families riding this exploit, with evidence and IOCs.

Detection signatures

YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.

Vendor-by-vendor mapping

Cross-references every affected SKU, including bundled OEM variants.

Social activity1

Community discussion across Reddit, Mastodon, and other social sources.

EXTERNAL REFERENCES

MITRE CVE

cve.org · CVE-2025-58335

NVD

nvd.nist.gov/vuln/detail/CVE-2025-58335

MITRE CWE · CWE-200

cwe.mitre.org

Vendor Advisory

jetbrains.com/privacy-security/issues-fixed

Information Disclosure in JetBrains Junie search_project

IdentifiersCVE-2025-58335CWE-200