CVE-2026-100259: Medium severity JetBrains YouTrack vulnerability
Published Sep 30, 2026
·Updated
In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access
Affected Software
1 affected component
JetBrains YouTrack<2026.2.18991
Event History
Sep 30, 2026
CVE Published
via MITRE·03:17 PM
Data Sourced
via MITRE·03:17 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
A user who already has view-only access to a Gantt chart can exploit the improper access control to make edits. The vulnerability does not require user interaction and is remotely reachable.
2
What is the impact of successful exploitation?
Successful exploitation can result in unauthorized modification of Gantt chart data. The provided severity vector indicates integrity impact only; no confidentiality or availability impact is specified.
3
Which YouTrack versions are affected?
JetBrains YouTrack versions before 2026.2.18991 are affected. Version 2026.2.18991 and later are not identified as affected by the provided information.