Toolbox (Jetbrains) - vulnerabilities (CVEs)

11 CVEs, 0 in the last 30 days, 32 known versions, newest CVE from 2025-04-17. Vendor: Jetbrains.

CVEs of Toolbox

• CVE-2025-43014 - CVSS 6.5 (medium), 2025-04-17: In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation
• CVE-2025-43013 - CVSS 7.5 (high), 2025-04-17: In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible
• CVE-2025-43012 - CVSS 9.8 (critical), 2025-04-17: In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible
• CVE-2025-42921 - CVSS 6.5 (medium), 2025-04-17: In JetBrains Toolbox App before 2.6 host key verification was missing in SSH plugin
• CVE-2024-24943 - CVSS 5.5 (medium), 2024-02-06: In JetBrains Toolbox App before 2.2 a DoS attack was possible via a malicious SVG image
• CVE-2022-48481 - CVSS 7.8 (high), 2023-04-28: In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible
• CVE-2020-25013 - CVSS 7.5 (high), 2020-11-16: JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler.
• CVE-2020-25207 - CVSS 9.8 (critical), 2020-11-16: JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler.
• CVE-2020-15827 - CVSS 7.5 (high), 2020-08-08: In JetBrains ToolBox version 1.17 before 1.17.6856, the set of signature verifications omitted the jetbrains-toolbox.exe file.
• CVE-2019-18368 - CVSS 7.3 (high), 2019-10-31: In JetBrains Toolbox App before 1.15.5666 for Windows, privilege escalation was possible.
• CVE-2019-14959 - CVSS 5.9 (medium), 2019-10-02: JetBrains Toolbox before 1.15.5605 was resolving an internal URL via a cleartext http connection.