CVE-2026-123294 · Other
NO FIX YET · SEE WHAT TO DO
JetBrains Hub, the authentication and user management service for JetBrains tools, could be abused to gain higher privileges by changing email authentication details during the verification flow. An attacker who can reach the verification flow could gain elevated access to the Hub instance.
first public Nov 6, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Teams that self-host JetBrains Hub before 2026.2.52556 are exposed, since Hub handles sign-in and access for JetBrains tools. Hosted or JetBrains-managed instances are handled by the vendor. unknown whether a specific account or configuration is required to reach the flaw.
Not affected if managed-hosting
Who cares jetbrains-hub, self-hosted
2026.2.52556)2026.2.52556 or laterIn JetBrains Hub before 2026.2.52556 privilege escalation was possible by changing email authentication details during the verification flow
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.