JetBrains published CVE-2026-111091 on Oct 15. In Junie CLI before 26.8.3, a project's MCP server configuration could run code even when the project was untrusted (CVSS 3.1 7.8, local, user interaction required, CWE-829). Junie keeps project MCP servers in .junie/mcp/mcp.json, a file teams can commit to their repos, so opening a booby-trapped repo was enough. Current docs say untrusted projects no longer load project MCP servers, hooks, skills or guidelines. The fix (26.8.3) shipped in August. This is the same class of bug as the earlier IDE and agent "open the repo, run the server" flaws. Update the CLI, and use --mcp-default-locations false when you review unfamiliar code.