CVE-2026-56142
HIGH
8.8
CVSS Score
Published: June 19, 2026 at 11:49 AM UTC
Updated: October 26, 2026 at 11:10 AM UTC
1 product affected across 1 vendorHub
Using Hub by JetBrains?
Get instant alerts when new vulnerabilities affect Hub - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH8.8
Exploit prediction
EPSS 0.6%
SSVC
No known exploit
Description
In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 privilege escalation by attaching authentication details to accounts was possible
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
2024.2.33606 ≤ v < 2024.2.1484292024.3.44799 ≤ v < 2024.3.1484302025.1.62455 ≤ v < 2025.1.1481202025.2.86069 ≤ v < 2025.2.1480482025.3.104432 ≤ v < 2025.3.1480332026.1.12024 ≤ v < 2026.1.13757
Affected range stops below 2024.2.148429, so it looks safe — our inference, not a vendor statement
Affected range stops below 2024.3.148430, so it looks safe — our inference, not a vendor statement
Affected range stops below 2025.1.148120, so it looks safe — our inference, not a vendor statement
Affected range stops below 2025.2.148048, so it looks safe — our inference, not a vendor statement
Affected range stops below 2025.3.148033, so it looks safe — our inference, not a vendor statement
Affected range stops below 2026.1.13757, so it looks safe — our inference, not a vendor statement
Affected range stops below 2026.1.13757,
2025.3.148033,
2025.2.148048,
2025.1.148120,
2024.3.148430,
2024.2.148429, so it looks safe — our inference, not a vendor statement
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (1)
SSVC — Action Prioritization
SSVCNo known exploitNot automatableTotal impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
- Attack Vector
- NETWORK
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- HIGH
- Integrity
- HIGH
- Availability
- HIGH
Vector?
Quick Info
StatusANALYZED
CWE
CWE-915
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card