CVE-2025-43012: JetBrains Toolbox

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

In JetBrains Toolbox App before 2.6 command injection in SSH plugin was possible

Affected products

• JetBrains Toolbox: before 2.6 (fixed in 2.6)

Published 2025-04-17. Last modified 2026-06-17.