JetBrains Toolbox App
7 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-118697 | 3.9.0 – < 3.9.1 ; < 3.8.2 | In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted compromised interme | CRITICAL 9.0 | |||
| CVE-2025-43014 | < 2.6 | In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation | MEDIUM 6.5 | 0.2 % | ||
| CVE-2025-43013 | < 2.6 | In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible | HIGH 7.5 | 0.2 % | ||
| CVE-2025-43012 | < 2.6 | In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible | CRITICAL 9.8 | 0.6 % | ||
| CVE-2025-42921 | < 2.6 | In JetBrains Toolbox App before 2.6 host key verification was missing in SSH plugin | MEDIUM 6.5 | 0.2 % | ||
| CVE-2024-24943 | < 2.2 | In JetBrains Toolbox App before 2.2 a DoS attack was possible via a malicious SVG image | MEDIUM 5.5 | 0.4 % | ||
| CVE-2022-48481 | < 1.28 | In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible | HIGH 7.8 | 0.2 % |