Critical Authentication Bypass in JetBrains Hub (CVE-2026-50242)

CVE-2026-50242, published on June 19, 2026, reveals a critical authentication bypass vulnerability in JetBrains Hub versions prior to 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, and 2024.2.148429. This flaw allows attackers to gain administrative access through direct database access, posing severe risks to affected systems. The vulnerability has been classified with a CVSS score of 10.0, indicating its critical nature and the urgent need for remediation. Organizations using the affected versions are advised to update immediately to mitigate the risk of exploitation. The advisory has been released by GitHub, highlighting the urgency of the situation. As of now, there are no reports of active exploitation, but the potential for severe impact remains high.

Key Points: • CVE-2026-50242 allows authentication bypass in multiple JetBrains Hub versions. • The vulnerability has a CVSS score of 10.0, indicating critical severity. • Immediate updates are recommended to prevent potential administrative access.