CVE-2026-56141: Weak RNG
In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 account takeover via predictable restore codes was possible
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
JetBrains Hubto a version that resolves this vulnerability.Fixed in 2026.1.13757 - Upgrade
Upgrade
JetBrains Hubto a version that resolves this vulnerability.Fixed in 2025.3.148033 - Upgrade
Upgrade
JetBrains Hubto a version that resolves this vulnerability.Fixed in 2025.2.148048 - Upgrade
Upgrade
JetBrains Hubto a version that resolves this vulnerability.Fixed in 2025.1.148120 - Upgrade
Upgrade
JetBrains Hubto a version that resolves this vulnerability.Fixed in 2024.3.148430 - Upgrade
Upgrade
JetBrains Hubto a version that resolves this vulnerability.Fixed in 2024.2.148429
Event History
Frequently Asked Questions
What is the severity of CVE-2026-56141?
CVE-2026-56141 has a critical severity rating of 9.8.
What causes the vulnerability CVE-2026-56141?
CVE-2026-56141 is caused by predictable restore codes in JetBrains Hub allowing for account takeover.
How can I mitigate CVE-2026-56141?
To mitigate CVE-2026-56141, upgrade to JetBrains Hub versions 2026.1.13757 or later.
What impact does CVE-2026-56141 have on users?
CVE-2026-56141 may allow attackers to take over user accounts without proper authorization.
Which software is affected by CVE-2026-56141?
CVE-2026-56141 affects several versions of JetBrains Hub.