CVE-2026-100265

In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation

• Published Sep 30, 2026
• CVSS 6.5 medium
• 0.1% chance of exploitation in the next 30 days (EPSS)
• A fix is available

CVE-2026-100265 at the National Vulnerability Database