Vulnerabilities

TI-2025-27881 CVE-2025-43014 · GHSA-7gwg-2mr3-xhpm

In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation

LOW 28

In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0023 Published 2025-04-17 Fixed in 2.6 CWE-304

TI-2025-27880 CVE-2025-43013 · GHSA-x8cw-f5xw-fwh2

LOW 32

In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00155 Published 2025-04-17 Fixed in 2.6 CWE-319

TI-2025-27879 CVE-2025-43012 · GHSA-xxvv-rw24-p2j6

MEDIUM 44

In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00631 Published 2025-04-17 Fixed in 2.6 CWE-77

TI-2025-27791 CVE-2025-42921 · GHSA-32gj-564x-3982

LOW 28

In JetBrains Toolbox App before 2.6 host key verification was missing in SSH plugin

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.002 Published 2025-04-17 Fixed in 2.6 CWE-297