JetBrains Hub email change during verification allows privilege escalation
Anyone can seize higher account rights on a company account server!
Summary
In JetBrains Hub, changing email authentication details during the verification flow allows privilege escalation. Versions before 2026.2.52556 are affected.
What to do
Check that you run a version newer than 2026.2.52556, and read the JetBrains advisory.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen