CVE-2026-123294: Critical severity vulnerability

Published Nov 6, 2026

Updated

In JetBrains Hub before 2026.2.52556 privilege escalation was possible by changing email authentication details during the verification flow

Event History

Nov 6, 2026

CVE Published

via MITRE·10:27 AM

Data Sourced

via MITRE·10:27 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker needs low-privileged authenticated access (PR:L). No user interaction is required, and the attack can be performed over the network.

Which versions should be remediated?

JetBrains Hub versions before 2026.2.52556 are affected. Upgrade to version 2026.2.52556 or later.

What is the potential impact of successful exploitation?

Successful exploitation can result in privilege escalation, with high confidentiality and integrity impact. The scope can extend beyond the initially authorized security context.

CVE-2026-123294: Critical severity vulnerability

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Which versions should be remediated?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Which versions should be remediated?

What is the potential impact of successful exploitation?