JetBrains Patches Critical Hub Authentication Bypass and Account Takeover Vulnerabilities

Gbhackers •Divya • July 2, 2026

JetBrains has released patches for several critical vulnerabilities in JetBrains Hub that could allow for full authentication bypass, account takeover, and unauthorized privilege escalation across integrated JetBrains services. Administrators are urged to update their Hub instances immediately. Critical Hub Vulnerabilities JetBrains’ latest fixed-issues bulletin highlights three new critical vulnerabilities affecting Hub, the central identity and […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

JetBrains Patches Critical Authentication Bypass and Account Takeover Vulnerabilities JetBrains has issued patches for critical vulnerabilities in JetBrains Hub that could lead to full authentication bypass, account takeover, and privilege escalation. The vulnerabilities, tracked as CVE-2026-56141, CVE-2026-56142, and CVE-2026-50242, affect multiple JetBrains services, including YouTrack and TeamCity. CVE-2026-56141 allows attackers to predict restore codes for account recovery, while CVE-2026-56142 enables privilege escalation through unsafe authentication detail modifications. CVE-2026-50242 involves an authentication bypass that could grant admin access. Administrators are urged to update to Hub version 2026.1.13757 or the relevant LTS branches immediately to mitigate these risks. The vulnerabilities were published on June 19, 2026, and pose a significant threat to organizations using JetBrains products. 37 sources 72

JetBrains Patches Critical Hub Authentication Bypass and Account Takeover Vulnerabilities

The full story

Extracted Entities

CWE Weaknesses (1)

Platforms (2)