CVE-2025-42921: JetBrains Toolbox

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In JetBrains Toolbox App before 2.6 host key verification was missing in SSH plugin

Affected products

• JetBrains Toolbox: before 2.6 (fixed in 2.6)

Published 2025-04-17. Last modified 2026-06-17.