CVE-2026-123856: Security vulnerability

Published Nov 6, 2026

Updated

In JetBrains Toolbox App before 3.6.1 nTLM hash disclosure was possible via SVG tool icons from a Remote Development server

Event History

Nov 6, 2026

CVE Published

via MITRE·04:10 PM

Data Sourced

via MITRE·04:10 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which JetBrains Toolbox App versions should be considered affected?

JetBrains Toolbox App versions before 3.6.1 are affected. Version 3.6.1 is the first version identified as not affected.

Which environments should be prioritized for review?

Prioritize installations that use Remote Development servers and obtain SVG tool icons from those servers, as this is the condition associated with the nTLM hash disclosure.

CVE-2026-123856: Security vulnerability

Event History

Frequently Asked Questions

Which JetBrains Toolbox App versions should be considered affected?

Which environments should be prioritized for review?

Company

Resources

Contact

Frequently Asked Questions

Which JetBrains Toolbox App versions should be considered affected?

Which environments should be prioritized for review?