Hub vulnerabilities

3 known vulnerabilities in Hub from JetBrains. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Hub: Improperly Controlled Modification of Dynamically-Determined Object Attributes

  CVE-2026-56142Jun 19, 2026JetBrains

  In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 privilege escalation by attaching authentication details to accounts was possible

• 9.8 Critical severity

  Hub: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  CVE-2026-56141Jun 19, 2026JetBrains

  In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 account takeover via predictable restore codes was possible

• 9.8 Critical severity

  Hub: Missing Authentication for Critical Functionality

  CVE-2026-50242Jun 19, 2026JetBrains

  In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible