Compromised eMudhra Certificates: Update Your JetBrains IDEs, ReSharper, etc.
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
JetBrains says private keys for eight eMudhra intermediate certificates were compromised, letting a network attacker impersonate services its tools contact. IDEs, Toolbox App, Gateway and ReSharper are affected because they use the bundled runtime's trust store, so OS updates don't help. Fixes cover IDEs 2025.2 through 2026.3 RC, Toolbox 3.9.1 and 3.8.2, and the jetbrainsd service 0.9.9728. Older versions get no fix. JetBrains reports no known exploitation; the CVE details and several claims were not independently verified.