{"id":"CVE-2026-118696","kind":"vulnerability","aliases":["CVE-2026-118696"],"related":[],"title":"JetBrains IDEs: embedded browser trusts revoked intermediate certificates","description":"In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3, and 2025.3.5.3; CLion before 2026.3, 2026.2.4.1, 2026.1.5.2, and 2025.3.6.3; DataGrip before 2026.3, 2026.2.6.1, 2026.1.4.1, and 2025.3.6.1; RustRover before 2026.3, 2026.2.5, 2026.1.4.1, and 2025.3.7.1; DataSpell before 2026.1.3.1 and 2025.3.3.1, the embedded browser trusted revoked intermediate certificates","summary":"Several JetBrains IDEs ship an embedded browser that keeps trusting intermediate certificates after they were revoked. An attacker who can present a site using such a certificate could be trusted by the IDE's browser.","severity":"high","cvss":8.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["clion","datagrip","dataspell","goland","intellij-idea","jetbrains","other","phpstorm","pycharm","rider","rubymine","rustrover","webstorm"],"not_affected_if":["default-config"],"how_to_check":"- Check the installed IDE version under Help > About and compare it with the fixed versions in the sources.","fix":"- IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm: `2026.3`, `2026.2.4`, `2026.1.5.1`, or `2025.3.6.2`\n- GoLand: `2026.3`, `2026.2.4`, `2026.1.5.1`, or `2025.3.5.2`\n- Rider: `2026.3`, `2026.2.4`, `2026.1.5.3`, or `2025.3.5.3`\n- CLion: `2026.3`, `2026.2.4.1`, `2026.1.5.2`, or `2025.3.6.3`\n- DataGrip: `2026.3`, `2026.2.6.1`, `2026.1.4.1`, or `2025.3.6.1`\n- RustRover: `2026.3`, `2026.2.5`, `2026.1.4.1`, or `2025.3.7.1`\n- DataSpell: `2026.1.3.1` or `2025.3.3.1`","status":"open","published_at":"2026-10-30T18:17:24+00:00","first_seen_at":"2026-10-30T18:55:29+00:00","triaged_at":"2026-10-30T18:56:39+00:00","updated_at":"2026-10-30T18:56:39+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-30T18:56:39Z","model":"claude-haiku-5-5","output":{"fix":"- IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm: `2026.3`, `2026.2.4`, `2026.1.5.1`, or `2025.3.6.2`\n- GoLand: `2026.3`, `2026.2.4`, `2026.1.5.1`, or `2025.3.5.2`\n- Rider: `2026.3`, `2026.2.4`, `2026.1.5.3`, or `2025.3.5.3`\n- CLion: `2026.3`, `2026.2.4.1`, `2026.1.5.2`, or `2025.3.6.3`\n- DataGrip: `2026.3`, `2026.2.6.1`, `2026.1.4.1`, or `2025.3.6.1`\n- RustRover: `2026.3`, `2026.2.5`, `2026.1.4.1`, or `2025.3.7.1`\n- DataSpell: `2026.1.3.1` or `2025.3.3.1`","reach":"network","title":"JetBrains IDEs: embedded browser trusts revoked intermediate certificates","impact":"medium","summary":"Several JetBrains IDEs ship an embedded browser that keeps trusting intermediate certificates after they were revoked. An attacker who can present a site using such a certificate could be trusted by the IDE's browser.","audience":"developers","category":"other","nicknames":[],"who_cares":["jetbrains","intellij-idea","pycharm","phpstorm","rubymine","webstorm","goland","rider","clion","datagrip","rustrover","dataspell"],"confidence":0.6,"fix_status":"available","needs_auth":"no","worst_case":"embedded browser trusts a revoked certificate chain, enabling interception","analyst_note":"Confirm the exact trigger and whether the embedded browser is on by default, using the NVD entry and JetBrains advisory.","how_to_check":"- Check the installed IDE version under Help > About and compare it with the fixed versions in the sources.\n- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["default-config"],"who_is_affected":"Developers who use the embedded browser inside these JetBrains IDEs to view web content, such as documentation or login pages. Teams that do not use the embedded browser feature are less exposed. unknown for finer conditions.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000861,"input_tokens":4381,"output_tokens":846,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-118696':11A,14A '-2026':10A,13A '2025.3.3.1':119C '2025.3.5.2':86C '2025.3.5.3':93C '2025.3.6.1':107C '2025.3.6.2':79C '2025.3.6.3':100C '2025.3.7.1':114C '2026.1.3.1':117C '2026.1.4.1':105C,112C '2026.1.5.1':77C,84C '2026.1.5.2':98C '2026.1.5.3':91C '2026.2.4':76C,83C,90C '2026.2.4.1':97C '2026.2.5':111C '2026.2.6.1':104C '2026.3':75C,82C,89C,96C,103C,110C 'attack':47B 'browser':4A,36B,64B,122C 'certif':8A,41B,56B,126C 'clion':15B,94C 'could':57B 'cve':9A,12A 'datagrip':16B,101C 'dataspel':17B,115C 'embed':3A,35B,121C 'goland':18B,80C 'ide':2A,32B,62B 'idea':21B,68C 'intellij':20B,67C 'intellij-idea':19B 'intermedi':7A,40B,125C 'jetbrain':1A,22B,31B,66C 'keep':38B 'phpstorm':24B,70C 'present':50B 'pycharm':25B,69C 'revok':6A,45B,124C 'rider':26B,87C 'rubymin':27B,71C 'rustrov':28B,108C 'sever':30B 'ship':33B 'site':52B 'trust':5A,39B,59B,123C 'use':53B 'webstorm':29B,73C","nicknames":[],"mitigations":[],"who_affected":"Developers who use the embedded browser inside these JetBrains IDEs to view web content, such as documentation or login pages. Teams that do not use the embedded browser feature are less exposed. unknown for finer conditions.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"first_public_at":"2026-10-30T18:17:24+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N","cvss_by":"cve@jetbrains.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118696","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118696","severity":null,"published_at":"2026-10-30T18:17:24+00:00","modified_at":"2026-10-30T18:17:24+00:00","first_seen_at":"2026-10-30T18:55:29+00:00","fetched_at":"2026-10-30T18:55:29+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}