Description
In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | Rider | < 2026.2.1 | 2026.2.1 |
Medium · 4.8
CVE-2026-100265
EUVD-2026-90009GHSA-f82x-3h7v-827j
In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation
Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by JetBrains