JetBrains IDE vulnerabilities listed as EUVD-2026-114244 across multiple products
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- JetBrains
- Product
- Rider, DataSpell, RubyMine (+29 more)
- First seen
Summary
The EUVD listing (CVSS v3.1 score 8.0) covers multiple JetBrains IDEs, including IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider, with fixed builds given for each product line. The listing does not name a CVE ID in the visible text.
If you use JetBrains
Update affected JetBrains IDEs to the fixed builds listed for your product line
Check your installed IDE build numbers against the listed versions
Install updates from the official JetBrains channel only
Update JetBrains Toolbox App to 3.9.1 or 3.8.2 or later
Update IntelliJ IDEA to 2026.3 or 2026.2.4 or later
Review the Toolbox daemon and certificate trust configuration on developer machines
What the sources say 2
· Mastodon: “In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted compromised intermediate certificates” Source
· Mastodon: “In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026.3, 2026.2.4, 2026.1.5.3,...” Source