CVE-2025-43014: JetBrains Toolbox

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmation

Affected products

• JetBrains Toolbox: before 2.6 (fixed in 2.6)

Published 2025-04-17. Last modified 2026-06-17.