{"id":"CVE-2026-118697","kind":"vulnerability","aliases":["CVE-2026-118697"],"related":[],"title":"JetBrains Toolbox and IntelliJ IDEA: daemon trusts compromised intermediate certificates","description":"In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted compromised intermediate certificates","summary":"The jetbrainsd daemon in JetBrains Toolbox App and IntelliJ IDEA accepted compromised intermediate certificates as trusted. An attacker holding such a certificate could impersonate JetBrains update or service endpoints and deliver malicious content to the machine.","severity":"critical","cvss":9.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["developer-tools","intellij-idea","jetbrains","jetbrains-toolbox","other"],"not_affected_if":["already-updated"],"how_to_check":"- Check the installed Toolbox App version against `3.9.1` and `3.8.2`.\n- Check the installed IntelliJ IDEA version against `2026.3` and `2026.2.4`.","fix":"- JetBrains Toolbox App: move to `3.9.1` or `3.8.2`.\n- IntelliJ IDEA: move to `2026.3` or `2026.2.4`.","status":"open","published_at":"2026-10-30T18:17:24+00:00","first_seen_at":"2026-10-30T18:55:29+00:00","triaged_at":"2026-10-30T18:56:30+00:00","updated_at":"2026-10-30T18:56:30+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-30T18:56:30Z","model":"claude-haiku-5-5","output":{"fix":"- JetBrains Toolbox App: move to `3.9.1` or `3.8.2`.\n- IntelliJ IDEA: move to `2026.3` or `2026.2.4`.","reach":"network","title":"JetBrains Toolbox and IntelliJ IDEA: daemon trusts compromised intermediate certificates","impact":"high","summary":"The jetbrainsd daemon in JetBrains Toolbox App and IntelliJ IDEA accepted compromised intermediate certificates as trusted. An attacker holding such a certificate could impersonate JetBrains update or service endpoints and deliver malicious content to the machine.","audience":"developers","category":"other","nicknames":[],"who_cares":["jetbrains","intellij-idea","jetbrains-toolbox","developer-tools"],"confidence":0.6,"fix_status":"available","needs_auth":"unknown","worst_case":"attacker-controlled content accepted as trusted by the daemon","analyst_note":"Check the NVD entry and JetBrains advisory for attack prerequisites and whether exploitation requires a rogue certificate in the trust chain.","how_to_check":"- Check the installed Toolbox App version against `3.9.1` and `3.8.2`.\n- Check the installed IntelliJ IDEA version against `2026.3` and `2026.2.4`.\n- unknown for any other check; the sources do not say.","plain_action":"","needs_analyst":true,"not_affected_if":["already-updated"],"who_is_affected":"Developers running a Toolbox App build before 3.9.1 or 3.8.2, or an IntelliJ IDEA build before 2026.3 or 2026.2.4, are exposed. The sources do not say which network conditions make exploitation practical, so unknown beyond the certificate trust issue.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000743,"input_tokens":4132,"output_tokens":660,"severity_before":"critical"},"analyst_status":null,"analyst_note":null,"search":"'-118697':13A,16A '-2026':12A,15A '2026.2.4':76C '2026.3':74C '3.8.2':70C '3.9.1':68C 'accept':37B 'app':33B,66C 'attack':44B 'certif':10A,40B,48B,83C 'compromis':8A,38B,81C 'content':59B 'could':49B 'cve':11A,14A 'daemon':6A,29B,79C 'deliv':57B 'develop':18B 'developer-tool':17B 'endpoint':55B 'hold':45B 'idea':5A,22B,36B,72C 'imperson':50B 'intellij':4A,21B,35B,71C 'intellij-idea':20B 'intermedi':9A,39B,82C 'jetbrain':1A,23B,25B,31B,51B,64C 'jetbrains-toolbox':24B 'jetbrainsd':28B,78C 'machin':62B 'malici':58B 'servic':54B 'tool':19B 'toolbox':2A,26B,32B,65C 'trust':7A,42B,80C 'updat':52B","nicknames":[],"mitigations":[],"who_affected":"Developers running a Toolbox App build before 3.9.1 or 3.8.2, or an IntelliJ IDEA build before 2026.3 or 2026.2.4, are exposed. The sources do not say which network conditions make exploitation practical, so unknown beyond the certificate trust issue.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"first_public_at":"2026-10-30T18:17:24+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss_by":"cve@jetbrains.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118697","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118697","severity":null,"published_at":"2026-10-30T18:17:24+00:00","modified_at":"2026-10-30T18:17:24+00:00","first_seen_at":"2026-10-30T18:55:29+00:00","fetched_at":"2026-10-30T18:55:29+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}