Description
In JetBrains Hub before 2026.2.52519 enforced two-factor authentication could be disabled via the profile update endpoint
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | Hub | < 2026.2.52519 | 2026.2.52519 |
High · 8.1
CVE-2026-123295
EUVD-2026-118060GHSA-hmgg-g8gj-f7wg
In JetBrains Hub before 2026.2.52519 enforced two-factor authentication could be disabled via the profile update endpoint
Published Nov 6, 2026 · Updated Nov 7, 2026 · Assigned by JetBrains