Improper Access Control in JetBrains YouTrack Affects User Security
CVE-2026-49385

6.5MEDIUM

Key Information:

Vendor

Jetbrains
Status
Youtrack
Vendor
CVE Published:
29 May 2026

What is CVE-2026-49385?

In JetBrains YouTrack prior to version 2026.1.13570, a vulnerability exists that enables users with low privileges to alter service accounts. This weakness in access control can result in unauthorized modifications, potentially compromising the integrity and security of the application. Organizations using affected versions are urged to upgrade to mitigate these risks.

Affected Version(s)

YouTrack 0 < 2026.1.13570

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.