CVE-2026-118697
Received Received - Intake

JetBrains Toolbox App Certificate Validation Bypass

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: JetBrains s.r.o.

Description
In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted compromised intermediate certificates

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-30
Last Modified
2026-10-30
Generated
2026-10-30
AI Q&A
2026-10-30
EPSS Evaluated
N/A
NVD
CVE-2026-118697
EUVD
EUVD-2026-114245

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
JetBrains Toolbox App 3.9.0
JetBrains Toolbox App 0
JetBrains IntelliJ IDEA 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-295 The product does not validate, or incorrectly validates, a certificate.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves JetBrains Toolbox App versions before 3.9.1 and 3.8.2, and IntelliJ IDEA versions before 2026.3 and 2026.2.4. The issue is that the jetbrainsd daemon trusts compromised intermediate certificates, which could allow attackers to intercept or manipulate communications.

Impact Analysis

An attacker could exploit this to perform man-in-the-middle attacks, decrypt sensitive data, or inject malicious code into your JetBrains applications. This could lead to unauthorized access to your projects, credentials, or other confidential information.

Compliance Impact

This vulnerability could lead to data breaches, violating GDPR's data protection requirements or HIPAA's safeguards for protected health information. Organizations may face legal penalties, reputational damage, and loss of customer trust if exploited.

Mitigation Strategies

Update JetBrains Toolbox App to version 3.9.1 or later and IntelliJ IDEA to version 2026.3 or 2026.2.4 or later to address the compromised intermediate certificates issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-118697. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart