JetBrains Toolbox App Command Injection Vulnerability in SSH Plugin

Vulnerability

A command injection vulnerability has been identified in the SSH plugin of the JetBrains Toolbox App, prior to version 2.6. This vulnerability allows for unauthorized command execution on the host machine.

Impact

Exploitation of this vulnerability could lead to arbitrary command execution on the host machine where the JetBrains Toolbox App is installed.

Remediation

Users are advised to update to JetBrains Toolbox App version 2.6 or later.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
6.6
impact
10.0
exploitability
4.7
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.