The vulnerability in JetBrains Hub allows attackers to obtain sensitive information through search queries. This is an access control weakness, meaning that the system does not properly restrict which users can view the results returned by a search. As a result, confidential user data may be exposed to anyone able to perform a search query, potentially compromising confidentiality but not integrity or availability.

Any deployment of JetBrains Hub prior to version 2026.2.52519 is affected. The product in question is the JetBrains Hub collaboration platform, and no other vendors or product variants are listed as impacted.

The CVSS score of 3.1 indicates a low severity weakness, and the EPSS score is not available, suggesting no known widespread exploitation. The vulnerability is not listed in CISA KEV, so there is no indication of active exploitation. Because the description does not specify a remote trigger, it is inferred that the attack vector requires the attacker to be able to use the search interface, which may be available to all authenticated users. The potential impact from disclosure is limited to confidentiality exposure of user information.