CVE-2026-100265: JetBrains Rider

Medium severity, CVSS 6.5. EPSS: 0.1% chance of exploitation in the next 30 days.

In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation

Affected products

• JetBrains Rider: before 2026.2.1 (fixed in 2026.2.1)

Published 2026-09-30. Last modified 2026-10-02.