Information Disclosure Vulnerability in JetBrains Hub by JetBrains
CVE-2026-123299

3.1LOW

Key Information:

Vendor

Jetbrains
Status
Hub
Vendor
CVE Published:
6 November 2026

What is CVE-2026-123299?

An information disclosure vulnerability was identified in JetBrains Hub that could allow unauthorized access to sensitive user data through search queries. This flaw, affecting versions of JetBrains Hub before 2026.2.52519, can potentially compromise user privacy, exposing potentially sensitive information unintentionally queried within the platform. Users of JetBrains Hub are strongly encouraged to upgrade to the latest version to mitigate these risks and ensure the security of their personal data.

Affected Version(s)

Hub 0 < 2026.2.52519

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.