BaseFortify

Publication date: 2025-11-10

Last updated on: 2025-11-20

Assigner: JetBrains s.r.o.

Description

In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-10

Last Modified

2025-11-20

Generated

2026-07-06

AI Q&A

2025-11-10

EPSS Evaluated

2026-07-05

NVD

CVE-2025-64682

Affected Vendors & Products

Vendor	Product	Version / Range
jetbrains	hub	to 2025.3.104432 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-362	The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Attack-Flow Graph

Executive Summary

This vulnerability is a race condition in JetBrains Hub versions before 2025.3.104432 that allows bypassing the Agent-user limit.

Impact Analysis

The vulnerability could allow an attacker to bypass the Agent-user limit, potentially leading to unauthorized use or access beyond intended limits, though it has a low severity score and does not impact confidentiality or availability.

Hi! I’m here to help you understand CVE-2025-64682. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70