--- title: Compromised eMudhra Certificates: Update Your JetBrains... description: Private keys for eight eMudhra intermediate certificates were compromised, letting a network attacker impersonate sites and services that JetBrains tools... canonical: https://daily.dev/posts/compromised-emudhra-certificates-update-your-jetbrains-ides-resharper-net-tools-toolbox-app-an-bwt6dqfdd twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Compromised eMudhra Certificates: Update Your JetBrains IDEs, ReSharper, .NET Tools, Toolbox App, and Gateway Now | daily.dev og:description: Private keys for eight eMudhra intermediate certificates were compromised, letting a network attacker impersonate sites and services that JetBrains tools... og:url: https://daily.dev/posts/compromised-emudhra-certificates-update-your-jetbrains-ides-resharper-net-tools-toolbox-app-an-bwt6dqfdd og:image: https://api.daily.dev/og/posts/BWT6dQFDd.png og:image:alt: Compromised eMudhra Certificates: Update Your JetBrains IDEs, ReSharper, .NET Tools, Toolbox App, and Gateway Now og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Compromised eMudhra Certificates: Update Your JetBrains IDEs, ReSharper, .NET Tools, Toolbox App, and Gateway Now **[JetBrains .NET Blog](https://daily.dev/sources/jetbrains-dotnet)** · 7 min read · 1 upvotes · 0 comments ## Summary Private keys for eight eMudhra intermediate certificates were compromised, letting a network attacker impersonate sites and services that JetBrains tools connect to. JetBrains IDEs, Toolbox App, Gateway, and ReSharper are affected because they trust the bundled JetBrains Runtime's certificate store, so OS updates don't help. Fixes landed in versions including IntelliJ IDEA 2026.2.4, PyCharm 2026.1.5.1, Rider 2026.2.4, and Toolbox App 3.9.1 or 3.8.2. A separate background service, jetbrainsd, needs its own update to version 0.9.9728, tracked as CVE-2026-118697. Versions 2025.1 and earlier won't get a fix at all. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### Why doesn't updating my operating system protect against the eMudhra certificate compromise in JetBrains IDEs? JetBrains IDEs check certificates against the trust store of their bundled JetBrains Runtime (JBR) rather than the operating system's trust store. Because of this, OS-level certificate updates don't remove trust in the eight compromised eMudhra intermediate certificates. You must update the IDE itself to a fixed version, such as IntelliJ IDEA 2026.2.4 or later. _daily.dev keeps developers current on security fixes like this before a network attacker can exploit them._ ### What is jetbrainsd and why does it need a separate update from my JetBrains IDE? jetbrainsd is a background service installed by the Toolbox App and JetBrains IDEs that maintains its own built-in list of trusted certificates, separate from the JetBrains Runtime. Updating JBR does not fix it; it requires jetbrainsd version 0.9.9728 or later, tracked as CVE-2026-118697. Only one copy runs per user, and any app update to this version fixes it for all JetBrains apps. _track multi-component patch rollouts like this jetbrainsd fix on daily.dev so nothing slips through._ ### Which JetBrains IDE versions are not getting a fix for the eMudhra certificate compromise? IDE versions 2025.1 and earlier, and Toolbox App versions 3.7 and earlier, will not receive a fix for the compromised eMudhra certificates. Affected users must update to a supported fixed version, such as 2025.2.6 or later for most IDEs, or Toolbox App 3.9.1 or 3.8.2, since no patch is planned for the older releases. _developers deciding whether to upgrade old IDE installs can track end-of-support security gaps on daily.dev._ ## Similar posts on daily.dev - [JetBrains Marketplace Ecosystem Security Update: Addressing Malicious Third-Party AI Plugins](https://daily.dev/posts/jetbrains-marketplace-ecosystem-security-update-addressing-malicious-third-party-ai-plugins-r8dyuc6rt) · JetBrains · 5 upvotes · 1 comments - [What the eMudhra CA Compromise Means for Elixir Developers](https://daily.dev/posts/what-the-emudhra-ca-compromise-means-for-elixir-developers-utpnyodt7) · ElixirStatus · 0 upvotes · 0 comments - [CISA: Ransomware gangs now exploiting critical TeamCity flaw](https://daily.dev/posts/cisa-ransomware-gangs-now-exploiting-critical-teamcity-flaw-ivphb8400) · BleepingComputer · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#devtools](https://daily.dev/tags/devtools), [#jetbrains](https://daily.dev/tags/jetbrains) [View this post on daily.dev](https://daily.dev/posts/compromised-emudhra-certificates-update-your-jetbrains-ides-resharper-net-tools-toolbox-app-an-bwt6dqfdd) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Compromised eMudhra Certificates: Update Your JetBrains IDEs, ReSharper, .NET Tools, Toolbox App, and Gateway Now","url":"https://daily.dev/posts/compromised-emudhra-certificates-update-your-jetbrains-ides-resharper-net-tools-toolbox-app-an-bwt6dqfdd","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/compromised-emudhra-certificates-update-your-jetbrains-ides-resharper-net-tools-toolbox-app-an-bwt6dqfdd"},"datePublished":"2026-10-30T17:09:32.348Z","dateModified":"2026-10-30T17:40:44.705Z","description":"Private keys for eight eMudhra intermediate certificates were compromised, letting a network attacker impersonate sites and services that JetBrains tools...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/2d6e1a95c7aec88211fadffd2d738568?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/2d6e1a95c7aec88211fadffd2d738568?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"JetBrains .NET Blog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"JetBrains .NET Blog","logo":"https://media.daily.dev/image/upload/s--2Z0xk_Ia--/f_auto,q_auto/v1780213485/logos/jetbrains-dotnet?_a=BAMAMiWQ0","url":"https://daily.dev/sources/jetbrains-dotnet"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/compromised-emudhra-certificates-update-your-jetbrains-ides-resharper-net-tools-toolbox-app-an-bwt6dqfdd","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,devtools,jetbrains","timeRequired":"PT7M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"JetBrains .NET Blog","item":"https://daily.dev/sources/jetbrains-dotnet"},{"@type":"ListItem","position":3,"name":"Compromised eMudhra Certificates: Update Your JetBrains IDEs, ReSharper, .NET Tools, Toolbox App, and Gateway Now"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/compromised-emudhra-certificates-update-your-jetbrains-ides-resharper-net-tools-toolbox-app-an-bwt6dqfdd#faq","mainEntity":[{"@type":"Question","name":"Why doesn't updating my operating system protect against the eMudhra certificate compromise in JetBrains IDEs?","acceptedAnswer":{"@type":"Answer","text":"JetBrains IDEs check certificates against the trust store of their bundled JetBrains Runtime (JBR) rather than the operating system's trust store. Because of this, OS-level certificate updates don't remove trust in the eight compromised eMudhra intermediate certificates. You must update the IDE itself to a fixed version, such as IntelliJ IDEA 2026.2.4 or later. daily.dev keeps developers current on security fixes like this before a network attacker can exploit them."}},{"@type":"Question","name":"What is jetbrainsd and why does it need a separate update from my JetBrains IDE?","acceptedAnswer":{"@type":"Answer","text":"jetbrainsd is a background service installed by the Toolbox App and JetBrains IDEs that maintains its own built-in list of trusted certificates, separate from the JetBrains Runtime. Updating JBR does not fix it; it requires jetbrainsd version 0.9.9728 or later, tracked as CVE-2026-118697. Only one copy runs per user, and any app update to this version fixes it for all JetBrains apps. track multi-component patch rollouts like this jetbrainsd fix on daily.dev so nothing slips through."}},{"@type":"Question","name":"Which JetBrains IDE versions are not getting a fix for the eMudhra certificate compromise?","acceptedAnswer":{"@type":"Answer","text":"IDE versions 2025.1 and earlier, and Toolbox App versions 3.7 and earlier, will not receive a fix for the compromised eMudhra certificates. Affected users must update to a supported fixed version, such as 2025.2.6 or later for most IDEs, or Toolbox App 3.9.1 or 3.8.2, since no patch is planned for the older releases. developers deciding whether to upgrade old IDE installs can track end-of-support security gaps on daily.dev."}}]} ```