JetBrains Rider
9 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-118697 | | In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 20 | CRITICAL 9.0 | 0.3 % | ||
| CVE-2026-118696 | | In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026 | HIGH 8.0 | 0.3 % | ||
| CVE-2026-100265 | < 2026.2.1 | In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation | MEDIUM 6.5 | 0.1 % | ||
| CVE-2025-43016 | < 2025.1.2 | In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session | HIGH 7.5 | 0.4 % | ||
| CVE-2025-23385 | 2024.3 – < 2024.3.4 ; 2024.2 – < 2024.2.8 ; < 2024.1.7 | In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 202 | HIGH 7.8 | 0.1 % | ||
| CVE-2024-37051 | | GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023 | CRITICAL 9.3 | 4.9 % | ||
| CVE-2024-24939 | < 2023.3.3 | In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible | MEDIUM 5.3 | 0.3 % | ||
| CVE-2022-37396 | 2022.2 – < 2022.2 | In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution | HIGH 7.8 | 0.2 % | ||
| CVE-2022-29821 | 2022.1 – < 2022.1 | In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possible | HIGH 7.7 | 0.2 % |