Authorization Flaw in JetBrains Hub Affects User Access Management
CVE-2026-123300

2.7LOW

Key Information:

Vendor

Jetbrains
Status
Hub
Vendor
CVE Published:
6 November 2026

What is CVE-2026-123300?

A vulnerability in JetBrains Hub prior to version 2026.2.52519 permits users with read-only access to make unauthorized changes to authorization module group mappings. This flaw can lead to improper access control and allow unauthorized users to modify sensitive configurations within the system. Protect your installations by ensuring you are using the latest version of the software.

Affected Version(s)

Hub 0 < 2026.2.52519

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
2.7
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.