JetBrains Toolbox App versions prior to 3.6.1 contain a command injection vulnerability via enterprise configuration URLs. This flaw allows an attacker to execute arbitrary commands under certain conditions. The vulnerability is identified as CVE-2026-123855 and has a high severity rating with a CVSS score of 7.5.