Critical · 9.6 CVE-2026-56142 EUVD-2026-38007GHSA-v6fr-2xp3-xpr7

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 privilege escalation by att…

Published Jun 19, 2026 · Updated Jun 24, 2026 · Assigned by JetBrains

Description

In JetBrains Hub before 2026.1.13757,
2025.3.148033,
2025.2.148048,
2025.1.148120,
2024.3.148430,
2024.2.148429 privilege escalation by attaching authentication details to accounts was possible

Affected products

Vendor	Product	Affected	Fixed
JetBrains	Hub	< 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429	2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429

References

https://www.jetbrains.com/privacy-security/issues-fixed/