Description
The VSCode extension for Spring CLI are vulnerable to command injection, resulting in command execution on the users machine.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Spring | CLI VSCode Extension | 0.9.0 and older | — |
Medium · 6.8
CVE-2026-22718
EUVD-2026-2553GHSA-h34g-p94m-h76q
Command injection vulnerability
Published Jan 14, 2026 · Updated Jan 14, 2026 · Assigned by vmware