Live › vulnerability › CVE-2026-118697
The jetbrainsd daemon in JetBrains Toolbox App and IntelliJ IDEA accepted compromised intermediate certificates as trusted. An attacker holding such a certificate could impersonate JetBrains update or service endpoints and deliver malicious content to the machine.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 18:55 UTC. All times on this page are UTC.
Developers running a Toolbox App build before 3.9.1 or 3.8.2, or an IntelliJ IDEA build before 2026.3 or 2026.2.4, are exposed. The sources do not say which network conditions make exploitation practical, so unknown beyond the certificate trust issue.
No product ranges from the sources yet.
3.9.1 and 3.8.2.2026.3 and 2026.2.4.3.9.1 or 3.8.2.2026.3 or 2026.2.4.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted compromised intermediate certificates
This page as .md · .json · in your agent: get_signal("CVE-2026-118697")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.