This vulnerability in JetBrains Hub allows privilege escalation by attaching authentication details to accounts improperly. It affects multiple versions prior to specific build numbers in 2024, 2025, and 2026 releases. The CVSS 3.1 base score is 9.6, indicating critical severity with network attack vector, low attack complexity, privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The vendor has published the vulnerability but has not yet provided an official fix or remediation level. The vulnerability is related to CWE-915, which concerns improper control over modification of object prototype attributes, potentially enabling attackers to escalate privileges.

Successful exploitation of this vulnerability allows an attacker with some privileges to escalate their access rights within JetBrains Hub, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. This can result in unauthorized access to sensitive data and administrative functions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround has been provided by JetBrains at this time, users should monitor the vendor's security advisories closely and apply updates as soon as they become available. Until a fix is released, restrict access to JetBrains Hub to trusted users and networks to reduce exposure.