Authorization Bypass in JetBrains YouTrack Affects VCS Hosting Configurations
CVE-2026-123332

4.7MEDIUM

Key Information:

Vendor

Jetbrains
Status
Youtrack
Vendor
CVE Published:
6 November 2026

What is CVE-2026-123332?

An authorization bypass vulnerability exists in JetBrains YouTrack prior to version 2026.2.19562. This issue allows project administrators to manage Version Control System (VCS) hosting server configurations without proper authorization, potentially leading to unauthorized access and modification of sensitive data.

Affected Version(s)

YouTrack 0 < 2026.2.19562

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.