CVE-2026-100266

Summary

A missing authorization flaw allowed authenticated users to send arbitrary emails from the server's trusted address, potentially leading to unauthorized communication or phishing attacks.

Exploitability

Exploitation requires an authenticated user with access to the JetBrains Hub interface. The flaw is relatively straightforward to exploit once the user gains access.

Blast radius

If exploited, the impact could be significant, as it allows for unauthorized email sending from the server, potentially leading to phishing or other malicious activities.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to JetBrains Hub 2026.2.52366 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.