Jetbrains Toolbox vulnerabilities
11 vulnerabilities
Known vulnerabilities in Jetbrains Toolbox, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-42921jetbrainstoolbox+1
EPSS score0.20%
In JetBrains Toolbox App before 2.6 host key verification was missing in SSH pluginCVE-2025-43012jetbrainstoolbox+1EPSS score0.63%
In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possibleCVE-2025-43014jetbrainstoolbox+1EPSS score0.23%
In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmationCVE-2025-43013jetbrainstoolbox+1EPSS score0.15%
In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possibleCVE-2020-25013jetbrainstoolboxEPSS score1.38%
JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler.CVE-2020-25207jetbrainstoolboxEPSS score4.57%
JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler.CVE-2020-15827jetbrainstoolboxEPSS score0.69%
In JetBrains ToolBox version 1.17 before 1.17.6856, the set of signature verifications omitted the jetbrains-toolbox.exe file.CVE-2022-48481jetbrainstoolbox+1EPSS score0.21%
In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possibleCVE-2024-24943jetbrainstoolbox+1EPSS score0.41%
In JetBrains Toolbox App before 2.2 a DoS attack was possible via a malicious SVG imageCVE-2019-14959jetbrainstoolboxEPSS score0.66%
JetBrains Toolbox before 1.15.5605 was resolving an internal URL via a cleartext http connection.CVE-2019-18368jetbrainstoolboxEPSS score1.04%
In JetBrains Toolbox App before 1.15.5666 for Windows, privilege escalation was possible.