Authentication Mismatch Vulnerability in JetBrains Hub by JetBrains
CVE-2026-32229

6.8MEDIUM

Key Information:

Vendor

Jetbrains
Status
Hub
Vendor
CVE Published:
11 March 2026

What is CVE-2026-32229?

An authentication mismatch vulnerability exists in JetBrains Hub prior to version 2026.1. This flaw allows for discrepancies during the sign-in process, particularly when non-Single Sign-On (SSO) authentication is used alongside disabled two-factor authentication (2FA). If exploited, this could lead to unauthorized access to user accounts, highlighting the importance of robust authentication mechanisms in preventing security breaches.

Affected Version(s)

Hub 2025.1 < 2025.3.128064

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.