Jetbrains Toolbox vulnerabilities

• jetbrains toolbox app In JetBrains Toolbox App before 3.6.1 nTLM hash disclosure was possible via SVG tool icons from a... CVE-2026-123856 6.5 MediumNovember 6, 2026
• jetbrains toolbox app In JetBrains Toolbox App before 3.6.1 command injection was possible via enterprise configuration... CVE-2026-123855 7.5 HighNovember 6, 2026
• jetbrains toolbox app In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting... CVE-2026-123320 3.1 LowNovember 6, 2026
• jetbrains clion, datagrip, goland +8 more +10 more In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the... CVE-2026-118697 9.0 CriticalOctober 30, 2026
• jetbrains toolbox, toolbox app +1 more In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient... CVE-2025-43014 6.1 MediumApril 17, 2025
• jetbrains toolbox, toolbox app +1 more In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication... CVE-2025-43013 6.9 MediumApril 17, 2025
• jetbrains toolbox, toolbox app +1 more In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible CVE-2025-43012 8.3 HighApril 17, 2025
• jetbrains toolbox, toolbox app +1 more In JetBrains Toolbox App before 2.6 host key verification was missing in SSH plugin CVE-2025-42921 4.2 MediumApril 17, 2025
• jetbrains toolbox, toolbox app +1 more In JetBrains Toolbox App before 2.2 a DoS attack was possible via a malicious SVG image CVE-2024-24943 5.3 MediumFebruary 6, 2024
• jetbrains toolbox, toolbox app +1 more In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible CVE-2022-48481 5.2 MediumApril 28, 2023
• jetbrains toolbox JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser... CVE-2020-25207 9.8 CriticalNovember 16, 2020
• jetbrains toolbox JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser... CVE-2020-25013 7.5 HighNovember 16, 2020
• jetbrains toolbox In JetBrains ToolBox version 1.17 before 1.17.6856, the set of signature verifications omitted... CVE-2020-15827 7.5 HighAugust 8, 2020
• jetbrains toolbox In JetBrains Toolbox App before 1.15.5666 for Windows, privilege escalation was possible. CVE-2019-18368 7.3 HighOctober 31, 2019
• jetbrains toolbox JetBrains Toolbox before 1.15.5605 was resolving an internal URL via a cleartext http connection. CVE-2019-14959 5.9 MediumOctober 2, 2019