CVE-2025-64682

Published Nov 10, 2025

Last updated 4 months ago

CVSS low 2.7

Overview

Description: In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit
Source: cve@jetbrains.com
NVD status: Analyzed
Products: hub

Risk scores

CVSS 3.1

Type: Primary
Base score: 3.7
Impact score: 1.4
Exploitability score: 2.2
Vector string: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Severity: LOW

Weaknesses

cve@jetbrains.com: CWE-362
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-362

Hype score: Not currently trending

CVE-2025-64682 In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit https://t.co/hQk75DsS6w
@CVEnew
10 Nov 2025
271 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:jetbrains:hub:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "8A004A90-824E-4528-AEF7-F000D4C968FB",
            "versionEndExcluding": "2025.3.104432",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.

Overview

Risk scores

CVSS 3.1

Weaknesses

Social media

Configurations

Related CVEs

References