In JetBrains Hub before 2026.2.52556 privilege escalation was possible by changing email authentication details during the verification flow