Bypass in JetBrains YouTrack's Authorized Reporters List
CVE-2026-100269

4.3MEDIUM

Key Information:

Vendor

Jetbrains
Status
Youtrack
Vendor
CVE Published:
30 September 2026

What is CVE-2026-100269?

A vulnerability in JetBrains YouTrack prior to version 2026.2.19197 allows unauthorized access to the helpdesk project's Authorized Reporters list, potentially exposing sensitive information. This weakness can lead to unauthorized users gaining insights and capabilities that should be restricted.

Affected Version(s)

YouTrack 0 < 2026.2.19197

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.