SSH Plugin Vulnerability in JetBrains Toolbox App
CVE-2025-42921

6.5MEDIUM

Key Information:

Vendor

Jetbrains
Status
Toolbox App
Vendor
CVE Published:
17 April 2025

What is CVE-2025-42921?

The JetBrains Toolbox App prior to version 2.6 has a vulnerability in its SSH plugin that lacks proper host key verification. This oversight may expose users to potential security risks, as it could allow attackers to conduct man-in-the-middle attacks, leading to unauthorized access and data compromise. Users are strongly advised to update to the latest version to mitigate these risks.

Affected Version(s)

Toolbox App 0 < 2.6

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-42921 : SSH Plugin Vulnerability in JetBrains Toolbox App