JetBrains Rider vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20242
3. 20252
4. 20263

Newest CVEs

• CVE-2026-118697

  In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4; CLion…

  JetBrains · Toolbox App

  Critical9.0
• CVE-2026-118696

  In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4,…

  JetBrains · IntelliJ IDEA

  High8.0
• CVE-2026-100265

  In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation

  JetBrains · Rider

  Medium4.8
• CVE-2025-43016

  In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session

  JetBrains · Rider

  Medium5.4
• CVE-2025-23385

  In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and…

  JetBrains · ReSharper

  High7.8
• CVE-2024-37051

  GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7,…

  JetBrains · IntelliJ IDEA

  Critical9.3
• CVE-2024-24939

  In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible

  JetBrains · Rider

  Low3.3
• CVE-2022-37396

  In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution

  JetBrains · Rider

  Medium4.1
• CVE-2022-29821

  In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possible

  JetBrains · Rider

  Medium6.9