Privilege Escalation Vulnerability in JetBrains Hub Software by JetBrains
CVE-2026-123294

9.6CRITICAL

Key Information:

Vendor

Jetbrains
Status
Hub
Vendor
CVE Published:
6 November 2026

What is CVE-2026-123294?

A privilege escalation vulnerability exists in JetBrains Hub prior to version 2026.2.52556. The issue arises when an attacker can manipulate email authentication details during the verification process, potentially allowing unauthorized access to elevated privileges within the system. This vulnerability underscores the importance of securing the email verification flow and ensuring that authentication processes are robust against manipulation.

Affected Version(s)

Hub 0 < 2026.2.52556

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
9.6
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.