Compromised eMudhra Certificates: Update Your JetBrains IDEs, ReSharper, .NET Tools, Toolbox App, and Gateway Now - The JetBrains Blog

JetBrains has issued security updates after the private keys for eight eMudhra intermediate certificates were compromised, creating a risk that network attackers could impersonate websites and services accessed by JetBrains products. The issue affects IDEs, ReSharper and other .NET tools, Toolbox App, Gateway, the bundled JetBrains Runtime trust store, the JCEF embedded browser, and the separate jetbrainsd background service; operating system updates alone do not resolve it. JetBrains reports no known exploitation against its users and recommends updating affected software to specified fixed releases, particularly because versions from 2025.1 and earlier, as well as Toolbox App 3.7 and earlier, will not be patched. The fixes remove trust in compromised certificate chains, update JCEF certificate protections where available, and require jetbrainsd version 0.9.9728 or later. Users unable to update can temporarily remove affected certificates from a copied Java trust store, disable JCEF, and manually update jetbrainsd, while also updating project JDKs and independently bundled runtimes such as Node.js, Python, and Go.

No tracked trend matches for this post yet.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.