Skip to content
OpenAdvisories
Critical · 9.0 CVE-2026-118697 EUVD-2026-114245GHSA-c9gr-394r-65gg

In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2…

Published Oct 30, 2026 · Updated Nov 2, 2026 · Assigned by JetBrains

Description

In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4; CLion before 2026.3 and 2026.2.4.1; DataGrip before 2026.3 and 2026.2.6.1; RustRover before 2026.3 and 2026.2.5, the jetbrainsd daemon trusted compromised intermediate certificates

Affected products

VendorProductAffectedFixed
JetBrains Toolbox App 3.9 – < 3.9.1, < 3.8.2 3.9.1
JetBrains IntelliJ IDEA < 2026.2.4 2026.2.4
JetBrains PyCharm < 2026.2.4 2026.2.4
JetBrains PhpStorm < 2026.2.4 2026.2.4
JetBrains RubyMine < 2026.2.4 2026.2.4
JetBrains WebStorm < 2026.2.4 2026.2.4
JetBrains GoLand < 2026.2.4 2026.2.4
JetBrains Rider < 2026.2.4 2026.2.4
JetBrains CLion < 2026.2.4.1 2026.2.4.1
JetBrains DataGrip < 2026.2.6.1 2026.2.6.1
JetBrains RustRover < 2026.2.5 2026.2.5

Advisories 1

References