Canadian Cyber Centre Warns of Vulnerabilities in Six JetBrains Products

The Canadian Centre for Cyber Security issued advisory AV26-1132 warning of vulnerabilities affecting JetBrains CLion, Datalore, Hub, IntelliJ IDEA, Ktor, and YouTrack. The notice includes affected-version thresholds for several products and describes IntelliJ IDEA and YouTrack as affected across multiple versions, but the supplied material does not establish all product-to-version mappings clearly. It provides no CVE identifiers, severity ratings, vulnerability mechanisms, or information about exploitation activity.

The Cyber Centre recommends reviewing JetBrains’ security information and applying necessary updates as they become available. Security teams should inventory the six named products and verify affected releases and update requirements against vendor guidance. Separately, JetBrains’ security blog reports that it removed 15 third-party Marketplace plugins designed to steal users’ AI-provider API keys, blocked their publisher accounts, and disabled the plugins in installed IDEs in June 2026; the supplied sources do not link that incident to the new advisory.