A command injection vulnerability in the SMTP email verification functionality of JetBrains Hub versions prior to 2026.2.52556 allows an attacker with limited privileges to inject SMTP commands. This flaw does not impact confidentiality or availability but can lead to integrity issues.