Privilege Escalation Vulnerability in JetBrains YouTrack
CVE-2026-123328

6.4MEDIUM

Key Information:

Vendor

Jetbrains
Status
Youtrack
Vendor
CVE Published:
6 November 2026

What is CVE-2026-123328?

A security vulnerability in JetBrains YouTrack versions prior to 2026.2.19656 allows an attacker to bypass app permissions and escalate privileges through the project tab. This could enable unauthorized access to sensitive project data and functionalities, highlighting the need for prompt software updates to ensure security and integrity.

Affected Version(s)

YouTrack 0 < 2026.2.19656

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.