Medium · 6.5 CVE-2026-123856 EUVD-2026-118316GHSA-9mgx-v4pf-rrrp

In JetBrains Toolbox App before 3.6.1 nTLM hash disclosure was possible via SVG tool icons from a Remote Development server

Published Nov 6, 2026 · Updated Nov 6, 2026 · Assigned by JetBrains

Vendor: JetBrains Product: Toolbox App

Description

In JetBrains Toolbox App before 3.6.1 nTLM hash disclosure was possible via SVG tool icons from a Remote Development server

Affected products

Vendor	Product	Affected	Fixed
JetBrains	Toolbox App	< 3.6.1	3.6.1

Advisories 1

WID-SEC-2026-4393 JetBrains Toolbox App: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 8, 2026

References

https://www.jetbrains.com/privacy-security/issues-fixed/