JetBrains Junie AI Coding Agent guidelines.md Code Execution

Affected Vendor(s)

Affected Product(s)

Summary

The Junie AI coding assistant reads a guidelines.md file within a project’s .junie directory and treats the contents as additional user-level instructions when handling any request to the chat interface. Malicious instructions can be placed within this file that can cause Junie to execute unsafe commands without requiring user approval.

Timeline

Discovered on
November 13, 2025
Disclosed to Vendor on
November 14, 2025
Published on
December 25, 2025

Credit

Blog Post

References

Learn how Mindgard can help you navigate AI Security

Take the first step towards securing your AI. Book a demo now and we'll reach out to you.