CVE-2026-100273: High severity JetBrains YouTrack vulnerability
Published Sep 30, 2026
·Updated
In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts debugger allowed arbitrary code execution
Affected Software
1 affected component
JetBrains YouTrack<2026.2.19197
Event History
Sep 30, 2026
CVE Published
via MITRE·03:17 PM
Data Sourced
via MITRE·03:17 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which YouTrack versions require remediation?
JetBrains YouTrack versions before 2026.2.19197 are affected. Upgrade to 2026.2.19197 or later.
2
What level of access does an attacker need?
The CVSS vector indicates network access and low privileges are required, with no user interaction. Exploitation is rated high complexity.
3
What is the expected impact if exploitation succeeds?
Successful exploitation can result in arbitrary code execution. The CVSS vector rates confidentiality and integrity impact as high, while availability impact is rated none.