In JetBrains Hub before 2026.2.52519 privilege escalation via forged email verification was possible
CWE-863