Trust Issues in JetBrains Toolbox and IntelliJ IDEA Lead to Certificate Vulnerability
CVE-2026-118697

9CRITICAL

Key Information:

Vendor

Jetbrains
Status
Toolbox App
Intellij Idea
Vendor
CVE Published:
30 October 2026

What is CVE-2026-118697?

The JetBrains Toolbox App and specific versions of IntelliJ IDEA are vulnerable due to the trust placed in compromised intermediate certificates by the jetbrainsd daemon. With versions prior to 3.9.1 for Toolbox and 2026.3 for IntelliJ IDEA affected, users must be aware of the security implications of relying on these potentially malicious certificates, which pose significant risks to user data and application integrity.

Affected Version(s)

IntelliJ IDEA 0 < 2026.2.4

Toolbox App 3.9.0 < 3.9.1

Toolbox App 0 < 3.8.2

References

https://www.jetbrains.com/privacy-security/issues-fixed/
https://blog.jetbrains.com/security/2026/10/compromised-e...
https://emudhra.com/en/post/certificate-security-incident

CVSS V3.1

Score:
9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.