Authorization Bypass Vulnerability in JetBrains YouTrack
CVE-2026-100273

8.2HIGH

Key Information:

Vendor

Jetbrains
Status
Youtrack
Vendor
CVE Published:
30 September 2026

What is CVE-2026-100273?

An authorization bypass vulnerability exists in JetBrains YouTrack versions prior to 2026.2.19197. This flaw in the scripts debugger enables attackers to execute arbitrary code, potentially compromising the integrity of the system. It's essential for users of affected versions to apply the latest updates to mitigate risks associated with this vulnerability.

Affected Version(s)

YouTrack 0 < 2026.2.19197

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.