Vulnerabilities > Jetbrains > Toolbox > 2.2

DATE CVE VULNERABILITY TITLE RISK
2025-04-17 CVE-2025-43014 Missing Critical Step in Authentication vulnerability in Jetbrains Toolbox
In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation
network
low complexity
jetbrains CWE-304
6.5
2025-04-17 CVE-2025-42921 Improper Validation of Certificate with Host Mismatch vulnerability in Jetbrains Toolbox
In JetBrains Toolbox App before 2.6 host key verification was missing in SSH plugin
network
low complexity
jetbrains CWE-297
6.5
2025-04-17 CVE-2025-43013 Cleartext Transmission of Sensitive Information vulnerability in Jetbrains Toolbox
In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible
network
low complexity
jetbrains CWE-319
7.5