SB2026020944 - Authentication bypass in JetBrains Hub
Published: February 9, 2026
Security Bulletin ID
SB2026020944
Severity
High
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Missing authentication for critical function (CVE-ID: CVE-2026-25848)
The vulnerability allows a remote attacker to bypass authentication checks.
The vulnerability exists due to an error in the authentication process. A remote non-authenticated attacker can bypass authentication checks and gain unauthorized access to administrative actions.
Successful exploitation of the vulnerability may allow an attacker to compromise the affected system.
Remediation
Install update from vendor's website.