important · Edge devices
An unauthenticated caller can register a trusted JetBrains Hub service and become superuser.
Affects
JetBrains Hub, a self-hosted identity and access-management server used by JetBrains development products.
The registration surface grants the rogue service control over Hub's identity and authorization system without requiring administrator credentials.
Detail and 4 sources
JetBrains published a fix, but revocation is not complete.
Sources