PT-2026-50876 · Jetbrains · Hub

Published 2026-06-19 · Updated 2026-06-20 · CVE-2026-56142

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions JetBrains Hub versions prior to 2026.1.13757 JetBrains Hub versions prior to 2025.3.148033 JetBrains Hub versions prior to 2025.2.148048 JetBrains Hub versions prior to 2025.1.148120 JetBrains Hub versions prior to 2024.3.148430 JetBrains Hub versions prior to 2024.2.148429

Description A privilege escalation issue exists where attackers can attach authentication details to accounts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the software to minimize the risk of exploitation.

LPE

Weakness Enumeration

CWE-915

Related Identifiers

CVE-2026-56142

Affected Products

Hub

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-56142 · Security Note
• https://jetbrains.com/privacy-security/issues-fixed · Note
• https://twitter.com/HugoValters/status/2068477747945517171 · Twitter Post