CVE-2026-123320: Low severity vulnerability

Published Nov 6, 2026

Updated

In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server

Event History

Nov 6, 2026

CVE Published

via MITRE·10:28 AM

Data Sourced

via MITRE·10:28 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What must an attacker do for this issue to be exploited?

An attacker must cause the Toolbox App login dialog to connect to a malicious server. Exploitation also requires user interaction and has high attack complexity.

What is the potential impact if exploitation succeeds?

The reported impact is limited to integrity: an attacker may be able to modify data or actions in the affected context. No confidentiality or availability impact is indicated.

Which installations are affected?

JetBrains Toolbox App versions before 3.9 are affected. The provided information does not state whether any particular configuration changes exposure.

CVE-2026-123320: Low severity vulnerability

Event History

Frequently Asked Questions

What must an attacker do for this issue to be exploited?

What is the potential impact if exploitation succeeds?

Which installations are affected?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker do for this issue to be exploited?

What is the potential impact if exploitation succeeds?

Which installations are affected?