JetBrains Toolbox App

• CVE-2026-118697 Critical 9.0 In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4; CLion before 2026.3 and 2026.2.4.1; DataGrip before 0.3%
• CVE-2025-43014 Medium 6.1 In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation 0.2%
• CVE-2025-43013 Medium 6.9 In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible 0.2%
• CVE-2025-43012 High 8.3 In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible 0.6%
• CVE-2025-42921 Medium 4.2 In JetBrains Toolbox App before 2.6 host key verification was missing in SSH plugin 0.2%
• CVE-2024-24943 Medium 5.3 In JetBrains Toolbox App before 2.2 a DoS attack was possible via a malicious SVG image 0.4%
• CVE-2022-48481 Medium 5.2 In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible 0.2%