CVE-2026-118697 In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4; CLion before 2026.3 and 2026.2.4.1; DataGrip before....
CriticalCVSS 9.0
EPSS 0.29%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4; CLion before 2026.3 and 2026.2.4.1; DataGrip before 2026.3 and 2026.2.6.1; RustRover before 2026.3 and 2026.2.5, the jetbrainsd daemon trusted compromised intermediate certificates
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| JetBrains Toolbox App | >= 3.9, < 3.9.1 | 3.9.1 |
| JetBrains Toolbox App | < 3.8.2 | 3.8.2 |
| JetBrains IntelliJ IDEA | < 2026.2.4 | 2026.2.4 |
| JetBrains PyCharm | < 2026.2.4 | 2026.2.4 |
| JetBrains PhpStorm | < 2026.2.4 | 2026.2.4 |
| JetBrains RubyMine | < 2026.2.4 | 2026.2.4 |
| JetBrains WebStorm | < 2026.2.4 | 2026.2.4 |
| JetBrains GoLand | < 2026.2.4 | 2026.2.4 |
| JetBrains Rider | < 2026.2.4 | 2026.2.4 |
| JetBrains CLion | < 2026.2.4.1 | 2026.2.4.1 |
| JetBrains DataGrip | < 2026.2.6.1 | 2026.2.6.1 |
| JetBrains RustRover | < 2026.2.5 | 2026.2.5 |