Improper Access Control in JetBrains YouTrack
CVE-2025-64687

5.4MEDIUM

Key Information:

Vendor

Jetbrains
Status
Youtrack
Vendor
CVE Published:
10 November 2025

What is CVE-2025-64687?

In JetBrains YouTrack, prior to version 2025.3.104432, there exists a vulnerability that facilitates improper access control. This flaw allows unauthorized users to modify the logic of the MCP tool, potentially leading to manipulation of project management functionalities. Users of the affected versions should take immediate action to apply necessary updates to safeguard their installations.

Affected Version(s)

YouTrack 0 < 2025.3.104432

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-64687 : Improper Access Control in JetBrains YouTrack