[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Context & Harness Attacks · markdown

official CVE record (JetBrains as CNA; GitHub Advisory GHSA-3cv3-8rwm-vvm3, Nov 6)

JetBrains Junie CLI before 26.8.24: the "Allow Similar Commands" option let commands run that the user never approved (CVE-2026-123315)

  • Update Junie CLI to 26.8.24 or later.
  • Prefer exact-command approvals for agents, and avoid broad "allow similar" rules on shells that hold credentials.

Sources: GitHub Advisory: GHSA-3cv3-8rwm-vvm3 · NVD: CVE-2026-123315 · JetBrains: Fixed security issues