CVE-2026-56142

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 privilege escalation by attaching authentication details to accounts was possible

Score

CVSS 3.1 9.9 Critical

Status

Analyzed - cve@jetbrains.com

Published

2026-06-19

Last modified

2026-10-26

Weaknesses

CWE-915

Affected products

• Hub (Jetbrains)

References

• https://www.jetbrains.com/privacy-security/issues-fixed/