CVE-2026-123295: High severity vulnerability

Published Nov 6, 2026

Updated

In JetBrains Hub before 2026.2.52519 enforced two-factor authentication could be disabled via the profile update endpoint

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade JetBrains Hub to a version that resolves this vulnerability.
Fixed in 2026.2.52519

Event History

Nov 6, 2026

CVE Published

via MITRE·10:27 AM

Data Sourced

via MITRE·10:27 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The attacker needs low-privileged authenticated access to JetBrains Hub. Exploitation does not require user interaction and can be performed over the network.

What is the impact of successful exploitation?

An attacker could disable enforced two-factor authentication through the profile update endpoint. The assigned vector indicates high impact to confidentiality and integrity, with no stated availability impact.

Which deployments are affected?

JetBrains Hub versions before 2026.2.52519 are affected. The issue specifically concerns deployments where two-factor authentication is enforced.

CVE-2026-123295: High severity vulnerability

Remediation

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the impact of successful exploitation?

Which deployments are affected?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the impact of successful exploitation?

Which deployments are affected?