---
id: CVE-2026-118697
title: >-
  In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm,
  PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4;
  CLion before 2026.3 and 2026.2.4.1; DataGrip before 2026.3 and 2026.2.6.1;
  RustRover befo…
summary: >-
  In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm,
  PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4;
  CLion before 2026.3 and 2026.2.4.1; DataGrip before 2026.3 and 2026.2.6.1;
  RustRover befo…
severity: critical
cvss: 9
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-295
vendor: JetBrains
product: Toolbox App
affected:
  - toolbox_app >= 3.9 < 3.9.1
  - toolbox_app < 3.8.2
  - intellij_idea < 2026.2.4
  - PyCharm < 2026.2.4
  - PhpStorm < 2026.2.4
  - RubyMine < 2026.2.4
  - WebStorm < 2026.2.4
  - GoLand < 2026.2.4
  - Rider < 2026.2.4
  - CLion < 2026.2.4.1
  - DataGrip < 2026.2.6.1
  - RustRover < 2026.2.5
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-30T00:00:00+00:00'
published: '2026-10-30'
updated: '2026-11-02'
sourceUpdated: '2026-11-02T16:19:28.345Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-118697'
references:
  - url: 'https://www.jetbrains.com/privacy-security/issues-fixed/'
  - url: >-
      https://blog.jetbrains.com/security/2026/10/compromised-emudhra-certificates-ides/
  - url: 'https://emudhra.com/en/post/certificate-security-incident'
  - url: 'https://bugzilla.mozilla.org/show_bug.cgi?id=2083449'
tags:
  - cve.org
epss: 0.00291
epssPercentile: 0.21768
ingestedAt: '2026-11-05T19:30:42.708Z'
---

## Overview

In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4; CLion before 2026.3 and 2026.2.4.1; DataGrip before 2026.3 and 2026.2.6.1; RustRover before 2026.3 and 2026.2.5, the jetbrainsd daemon trusted compromised intermediate certificates

## Affected

- `toolbox_app >= 3.9 < 3.9.1`
- `toolbox_app < 3.8.2`
- `intellij_idea < 2026.2.4`
- `PyCharm < 2026.2.4`
- `PhpStorm < 2026.2.4`
- `RubyMine < 2026.2.4`
- `WebStorm < 2026.2.4`
- `GoLand < 2026.2.4`
- `Rider < 2026.2.4`
- `CLion < 2026.2.4.1`
- `DataGrip < 2026.2.6.1`
- `RustRover < 2026.2.5`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.