CVE-2026-56142 Privilege escalation in Hub

Critical 9.6 Published 19 Jun 2026 Updated 24 Jun 2026

Attackers can escalate privileges by attaching authentication details to accounts in JetBrains Hub, requiring an upgrade to secure the system.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2026-56142?

CVE-2026-56142 is a critical vulnerability in JetBrains Hub, published on 19 Jun 2026. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 privilege escalation by attaching authentication details to accounts was possible

Weakness: CWE-915

Which versions are affected by CVE-2026-56142?

It affects 1 product.

Products include Jetbrains Hub.

How do I fix CVE-2026-56142?

No fix has been published for CVE-2026-56142 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-56142 being exploited?

There is no known exploitation of CVE-2026-56142 in the wild and no public exploit code.

Sources

Also known as GHSA-v6fr-2xp3-xpr7.