CVE-2025-29903

MEDIUM

JetBrains Runtime <21.0.6b872.80 - Code Injection

Title source: llm
STIX 2.1

Description

In JetBrains Runtime before 21.0.6b872.80 arbitrary dynamic library execution due to insecure macOS flags was possible

References (1)

Scores

CVSS v3 5.2
EPSS 0.0001
EPSS Percentile 0.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-426
Status published
Products (1)
jetbrains/runtime < 21.0.6b872.80
Published Mar 12, 2025
Tracked Since Feb 18, 2026