Stored XSS Vulnerability in JetBrains YouTrack
CVE-2026-61492

3.5LOW

Key Information:

Vendor

Jetbrains
Status
Youtrack
Vendor
CVE Published:
10 July 2026

What is CVE-2026-61492?

The JetBrains YouTrack software is vulnerable to a stored Cross-Site Scripting (XSS) attack through article titles in digest emails. This vulnerability allows attackers to inject malicious scripts that can be executed in the context of the user’s session, potentially leading to unauthorized access and data exposure. Users of affected versions should update to the latest secure release to mitigate this risk.

Affected Version(s)

YouTrack 0 < 2026.2.17394

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
3.5
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.