Insufficient Warning in Login Dialog of JetBrains Toolbox App
CVE-2026-123320

3.1LOW

Key Information:

Vendor

Jetbrains
Status
Toolbox App
Vendor
CVE Published:
6 November 2026

What is CVE-2026-123320?

The JetBrains Toolbox App prior to version 3.9 suffers from a vulnerability in its login dialog, which fails to provide adequate warnings when connecting to potentially malicious servers. This oversight can lead users to unknowingly expose their credentials or sensitive data to attackers masquerading as legitimate services. It is crucial for users to ensure they are using an updated version of the Toolbox App to mitigate this risk and safeguard their accounts.

Affected Version(s)

Toolbox App 0 < 3.9

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.