CVE-2026-118697

Name of the Vulnerable Software and Affected Versions JetBrains Toolbox App versions prior to 3.9.1 JetBrains Toolbox App versions prior to 3.8.2 IntelliJ IDEA versions prior to 2026.3 IntelliJ IDEA versions prior to 2026.2.4

Description The jetbrainsd daemon improperly trusts compromised intermediate certificates. This allows an attacker to bypass security checks used to verify software and connections.

Recommendations Update JetBrains Toolbox App to version 3.9.1 or later. Update JetBrains Toolbox App to version 3.8.2 or later. Update IntelliJ IDEA to version 2026.3 or later. Update IntelliJ IDEA to version 2026.2.4 or later.