{"id":"CVE-2026-123294","kind":"vulnerability","aliases":["CVE-2026-123294"],"related":[],"title":"JetBrains Hub: email verification flaw allows privilege escalation before 2026.2.52556","description":"In JetBrains Hub before 2026.2.52556 privilege escalation was possible by changing email authentication details during the verification flow","summary":"JetBrains Hub, the authentication and user management service for JetBrains tools, could be abused to gain higher privileges by changing email authentication details during the verification flow. An attacker who can reach the verification flow could gain elevated access to the Hub instance.","severity":"critical","cvss":9.6,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["jetbrains-hub","other","self-hosted"],"not_affected_if":["managed-hosting"],"how_to_check":"- Check the installed Hub version against the fixed version in the sources (`2026.2.52556`)\n- Confirm whether the Hub instance is reachable from outside your network","fix":"- JetBrains Hub: upgrade to `2026.2.52556` or later","status":"open","published_at":"2026-11-06T11:17:08+00:00","first_seen_at":"2026-11-06T11:41:25+00:00","triaged_at":"2026-11-06T11:41:47+00:00","updated_at":"2026-11-06T11:41:47+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-11-06T11:41:47Z","model":"claude-haiku-5-5","output":{"fix":"- JetBrains Hub: upgrade to `2026.2.52556` or later","reach":"unknown","title":"JetBrains Hub: email verification flaw allows privilege escalation before 2026.2.52556","impact":"high","summary":"JetBrains Hub, the authentication and user management service for JetBrains tools, could be abused to gain higher privileges by changing email authentication details during the verification flow. An attacker who can reach the verification flow could gain elevated access to the Hub instance.","audience":"businesses","category":"other","nicknames":[],"who_cares":["jetbrains-hub","self-hosted"],"confidence":0.5,"fix_status":"available","needs_auth":"unknown","worst_case":"attacker gains elevated privileges on the Hub instance","analyst_note":"Sources do not say whether an account is needed or how the verification flow is reached; check the JetBrains advisory for the exact preconditions.","how_to_check":"- Check the installed Hub version against the fixed version in the sources (`2026.2.52556`)\n- Confirm whether the Hub instance is reachable from outside your network","plain_action":"","needs_analyst":true,"not_affected_if":["managed-hosting"],"who_is_affected":"Teams that self-host JetBrains Hub before 2026.2.52556 are exposed, since Hub handles sign-in and access for JetBrains tools. Hosted or JetBrains-managed instances are handled by the vendor. unknown whether a specific account or configuration is required to reach the flaw.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000697,"input_tokens":4167,"output_tokens":560,"severity_before":"critical"},"analyst_status":null,"analyst_note":null,"search":"'-123294':13A,16A '-2026':12A,15A '2026.2.52556':10A,71C 'abus':37B 'access':62B 'allow':6A 'attack':52B 'authent':27B,45B,79C 'chang':43B,77C 'could':35B,59B 'cve':11A,14A 'detail':46B,80C 'elev':61B 'email':3A,44B,78C 'escal':8A,73C 'flaw':5A 'flow':50B,58B,84C 'gain':39B,60B 'higher':40B 'host':23B 'hub':2A,19B,25B,65B,69C 'instanc':66B 'jetbrain':1A,18B,24B,33B,68C 'jetbrains-hub':17B 'manag':30B 'possibl':75C 'privileg':7A,41B,72C 'reach':55B 'self':22B 'self-host':21B 'servic':31B 'tool':34B 'user':29B 'verif':4A,49B,57B,83C","nicknames":[],"mitigations":[],"who_affected":"Teams that self-host JetBrains Hub before 2026.2.52556 are exposed, since Hub handles sign-in and access for JetBrains tools. Hosted or JetBrains-managed instances are handled by the vendor. unknown whether a specific account or configuration is required to reach the flaw.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["critical","jetbrainshub","other","selfhosted"],"campaign_type":null,"search_a":"'-123294':13A,16A '-2026':12A,15A '2026.2.52556':10A 'allow':6A 'cve':11A,14A 'email':3A 'escal':8A 'flaw':5A 'hub':2A 'jetbrain':1A 'privileg':7A 'verif':4A","search_b":"'abus':37B 'access':62B 'attack':52B 'authent':27B,45B 'chang':43B 'could':35B,59B 'detail':46B 'elev':61B 'email':44B 'flow':50B,58B 'gain':39B,60B 'higher':40B 'host':23B 'hub':19B,25B,65B 'instanc':66B 'jetbrain':18B,24B,33B 'jetbrains-hub':17B 'manag':30B 'privileg':41B 'reach':55B 'self':22B 'self-host':21B 'servic':31B 'tool':34B 'user':29B 'verif':49B,57B","search_c":"'2026.2.52556':71C 'authent':79C 'chang':77C 'detail':80C 'email':78C 'escal':73C 'flow':84C 'hub':69C 'jetbrain':68C 'possibl':75C 'privileg':72C 'verif':83C","first_public_at":"2026-11-06T11:17:08+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","cvss_by":"cve@jetbrains.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-123294","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123294","severity":null,"published_at":"2026-11-06T11:17:08+00:00","modified_at":"2026-11-06T11:17:08+00:00","first_seen_at":"2026-11-06T11:41:25+00:00","fetched_at":"2026-11-06T11:41:25+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}