JetBrains Hub contains an authentication bypass vulnerability (CWE-306) identified as CVE-2026-50242. This vulnerability affects multiple pre-release versions prior to 2026.1.13757 and several 2025 and 2024 versions as listed. Exploitation involves bypassing authentication by directly accessing the database, which can lead to administrative access. The CVSS 3.1 base score is 10.0, reflecting that the vulnerability is remotely exploitable without privileges or user interaction and results in complete system compromise. The vendor has not yet provided an official fix or remediation level, and no known exploits have been reported in the wild.

Successful exploitation of this vulnerability allows an unauthenticated attacker to bypass authentication controls by directly accessing the database, resulting in administrative access to JetBrains Hub. This compromises confidentiality, integrity, and availability of the affected system, enabling full control over the application and potentially sensitive data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict direct database access to trusted administrators only and monitor for unauthorized access attempts. Avoid exposing the database to untrusted networks. Follow updates from JetBrains for official patches or mitigations.