Read the docs
TI-2025-17154 Aliases CVE-2025-23385GHSA-m9gq-w7jg-mrwv

In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4…

Priority LOW 35CWE-114Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possible

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00135 2nd percentileScored 2026-11-07
Fix Fixed ReSharper (JetBrains): 2024.3.4, 2024.2.8, 2024.1.7Rider (JetBrains): 2024.3.4, 2024.2.8, 2024.1.7+2 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
JetBrainsReSharper2024.3 to before 2024.3.4; 2024.2 to before 2024.2.8; before 2024.1.72024.3.4, 2024.2.8, 2024.1.7Patch availableCNA
JetBrainsRider2024.3 to before 2024.3.4; 2024.2 to before 2024.2.8; before 2024.1.72024.3.4, 2024.2.8, 2024.1.7Patch availableCNA
JetBrainsdotTrace2024.3 to before 2024.3.4; 2024.2 to before 2024.2.8; before 2024.1.72024.3.4, 2024.2.8, 2024.1.7Patch availableCNA
JetBrainsETW Host Servicebefore 16.4316.43Patch availableCNA
  • ReSharper VendorJetBrains Affected 2024.3 to before 2024.3.4; 2024.2 to before 2024.2.8; before 2024.1.7 Fixed in 2024.3.4, 2024.2.8, 2024.1.7 Patch available CNA
  • Rider VendorJetBrains Affected 2024.3 to before 2024.3.4; 2024.2 to before 2024.2.8; before 2024.1.7 Fixed in 2024.3.4, 2024.2.8, 2024.1.7 Patch available CNA
  • dotTrace VendorJetBrains Affected 2024.3 to before 2024.3.4; 2024.2 to before 2024.2.8; before 2024.1.7 Fixed in 2024.3.4, 2024.2.8, 2024.1.7 Patch available CNA
  • ETW Host Service VendorJetBrains Affected before 16.43 Fixed in 16.43 Patch available CNA

CPE configurations NVD · 4

CPEVersionsRoleVendor
cpe:2.3:a:jetbrains:dottrace:*:*:*:*:*:*:*:*before 2024.1.7; 2024.2 to before 2024.2.8; 2024.3 to before 2024.3.4VulnerableJetBrains
cpe:2.3:a:jetbrains:etw_host_service:*:*:*:*:*:*:*:*before 16.43VulnerableJetBrains
cpe:2.3:a:jetbrains:resharper:*:*:*:*:*:*:*:*before 2024.1.7; 2024.2 to before 2024.2.8; 2024.3 to before 2024.3.4VulnerableJetBrains
cpe:2.3:a:jetbrains:rider:*:*:*:*:*:*:*:*before 2024.1.7; 2024.2.0 to before 2024.2.8; 2024.3.0 to before 2024.3.4VulnerableJetBrains
  • cpe:2.3:a:jetbrains:dottrace:*:*:*:*:*:*:*:* Versions before 2024.1.7; 2024.2 to before 2024.2.8; 2024.3 to before 2024.3.4 Vulnerable ·JetBrains
  • cpe:2.3:a:jetbrains:etw_host_service:*:*:*:*:*:*:*:* Versions before 16.43 Vulnerable ·JetBrains
  • cpe:2.3:a:jetbrains:resharper:*:*:*:*:*:*:*:* Versions before 2024.1.7; 2024.2 to before 2024.2.8; 2024.3 to before 2024.3.4 Vulnerable ·JetBrains
  • cpe:2.3:a:jetbrains:rider:*:*:*:*:*:*:*:* Versions before 2024.1.7; 2024.2.0 to before 2024.2.8; 2024.3.0 to before 2024.3.4 Vulnerable ·JetBrains

Remediation

  • Fix · CNA ReSharper (JetBrains) Fixed in 2024.3.4, 2024.2.8, 2024.1.7
  • Fix · CNA Rider (JetBrains) Fixed in 2024.3.4, 2024.2.8, 2024.1.7
  • Fix · CNA dotTrace (JetBrains) Fixed in 2024.3.4, 2024.2.8, 2024.1.7
  • Fix · CNA ETW Host Service (JetBrains) Fixed in 16.43

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-23385
  2. 2026-10-03 Alias added: GHSA-m9gq-w7jg-mrwv

References

Advisory 1

  • TI-2025-39859 In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition CVSS 3.1HIGH 7.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences