CVE-2026-25848

In JetBrains Hub before 2025.3.119807 authentication bypass allowing administrative actions was possible

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@jetbrains.com

Published

2026-02-09

Last modified

2026-02-26

Weaknesses

CWE-306

Affected products

• Hub (Jetbrains)

References

• https://www.jetbrains.com/privacy-security/issues-fixed/