In JetBrains Hub before 2026.2.52519 two-factor authentication bypass was possible via the password reset flow
CWE-304