Rider (Jetbrains) - vulnerabilities (CVEs)

9 CVEs, 1 in the last 30 days, 95 known versions, newest CVE from 2026-09-30. Vendor: Jetbrains.

CVEs of Rider

• CVE-2026-100265 - CVSS 6.5 (medium), 2026-09-30: In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation
• CVE-2025-64457 - CVSS 7 (high), 2025-11-10: In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition
• CVE-2025-43016 - CVSS 7.5 (high), 2025-04-25: In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session
• CVE-2025-23385 - CVSS 7.8 (high), 2025-01-28: In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and…
• CVE-2024-37051 - CVSS 9.3 (critical), 2024-06-10: GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7,…
• CVE-2024-24939 - CVSS 5.3 (medium), 2024-02-06: In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible
• CVE-2022-37396 - CVSS 7.8 (high), 2022-08-03: In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution
• CVE-2022-29821 - CVSS 7.7 (high), 2022-04-28: In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possible
• CVE-2020-7906 - CVSS 7.5 (high), 2020-01-30: In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was fixed in release…
• CVE-2019-14960 - CVSS 7.8 (high), 2019-10-01: JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file.