Trending:
OpenAI admin controls GitHub Issues agent approvals Gemini in Chrome UK expansion Developer tools coverage
TECHSTAGED Better software. Smarter business.

Broad security patch across multiple MPS versions and Toolkit enhancements signal a new phase for JetBrains MPS

By TechStaged

· 2 min read

Prepared with AI assistance from source material. Automated editorial review recorded . Automated checks can miss errors and do not represent human approval. Editorial policy and corrections.

Illustration showing multiple MPS version badges with a shield indicating security fixes
TechStaged-owned

Summary

  • MPS versions 2026.2 RC2, 2026.1.2, 2025.3.3, 2025.2.5, and 2025.1.5 fix a critical security issue.
  • MPS 2026.1.2 and 2026.2 RC2 include improvements to the Projectional Agent Toolkit plugin.
  • The Projectional Agent Toolkit improvements include opening, closing, and creating MPS projects; automatic correction of SModel expressions in parsed Java statements.
  • Disable JCEF by turning off ide.browser.jcef.enabled in the MPS Registry for 2025.1.5 or 2025.2.5.

JetBrains has announced updates for several MPS versions to address a critical security issue, signalling a broad security patch rather than isolated fixes.

Versions listed include 2026.2 RC2, 2026.1.2, 2025.3.3, 2025.2.5, and 2025.1.5, indicating ongoing patching across major releases.

For more detailed security context, the announcement points readers to a dedicated post about compromised eMudhra certificates.

SECURITY POSTURE AND QUICK ACTIONS FOR AFFECTED USERS

A practical instruction for older releases is to disable JCEF by turning off ide.browser.jcef.enabled in the MPS Registry for 2025.1.5 or 2025.2.5.

The post notes that JBR and JCEF are affected by the security problem and may affect MPS‑based RCP applications.

Readers building or distributing RCP applications should review the linked post and take appropriate steps to secure those applications.

  • Disable JCEF for 2025.1.5/2025.2.5 as instructed.
  • Consider the potential impact on RCP applications due to JBR/JCEF vulnerabilities.

PROJECTIONAL AGENT TOOLKIT IMPROVEMENTS PLANNED FOR MPS 2026.2

The Toolkit improvements include opening, closing, and creating MPS projects, plus automatic correction of SModel expressions in parsed Java statements.

These enhancements are described as part of what is planned for MPS 2026.2.

  • Open/close/create project capabilities
  • Automatic correction of SModel expressions in parsed Java statements

WHAT THIS MEANS FOR READERS AND WHAT TO DECIDE

MPS 2026.2 RC2 is a release-candidate build, indicating more changes before a final release and signaling ongoing development.

The 2025 releases focus on the security fix, while 2026.2 adds Toolkit improvements, suggesting a broader improvement trajectory.

If you develop or distribute MPS-based RCP applications, follow the guidance in the linked post and perform necessary security actions to protect those apps.

SOURCES

Developer Tools Compromised eMudhra Certificates: What readers can understand and decide beyond the JetBrains announcement • 3 min read Developer Tools GitHub posits AI is reshaping developer work, urges three skills to sharpen • 2 min read Developer Tools SHIFT in Game Off 2026: what the announcement signals for developers • 1 min read Developer Tools AI Conformance in Kubernetes moves to SIG Architecture: what the evidence shows beyond the announcement • 2 min read Software Explainer: What the NAACP v. xAI ruling actually changes about data-center pollution and permits • 4 min read Security Claude Code extension incident: what verified evidence shows beyond the announcement • 3 min read Security ESC1 and ESC8 intrusion paths: what the Microsoft Security Blog reveals beyond the announcement • 1 min read Developer Tools Beyond the GA headline: what the verified evidence says about GitLab Orbit’s impact on agents and costs • 2 min read