CVE-2026-123297: Medium severity vulnerability
Published Nov 6, 2026
·Updated
In JetBrains Hub before 2026.2.52519 two-factor authentication bypass was possible via the password reset flow
Event History
Nov 6, 2026
CVE Published
via MITRE·10:27 AM
Data Sourced
via MITRE·10:27 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who could exploit this issue?
An unauthenticated remote attacker could attempt exploitation, but successful exploitation requires user interaction and high attack complexity.
2
What security impact could a successful bypass have?
The vulnerability could result in high confidentiality and integrity impact. Availability impact is rated as none.
3
Which deployments need remediation?
JetBrains Hub versions before 2026.2.52519 are affected. Updating to 2026.2.52519 or later addresses the affected version range described.