In JetBrains Hub before 2026.2.52519 missing authorisation allowed users with read-only access to modify auth module group mappings
An authenticated user with read-only access to JetBrains Hub can exploit it. The issue does not require user interaction and can be reached over the network.
The documented impact is unauthorized modification of authentication module group mappings. The CVSS vector indicates integrity impact only; no confidentiality or availability impact is specified.
JetBrains Hub versions before 2026.2.52519 are affected. The provided information does not identify any configuration prerequisite, so deployments granting users read-only access should be evaluated.
Review authentication module group mappings for unauthorized or unexpected changes, particularly changes made by accounts intended to have read-only access. The provided information does not include specific logs, indicators, or detection methods.