CVE-2026-103489: XSS
Published Oct 1, 2026
·Updated
In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible
Affected Software
1 affected component
JetBrains YouTrack<2026.2.19422
Event History
Oct 1, 2026
CVE Published
via MITRE·09:15 AM
Data Sourced
via MITRE·09:15 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which YouTrack instances should be prioritized for remediation?
Instances running a version earlier than 2026.2.19422 should be prioritized, particularly where VCS command failure notifications are used.
2
What conditions are required for exploitation?
The vector indicates network reachability, high attacker privileges, high attack complexity, and required user interaction. The documented impact is limited to integrity; confidentiality and availability impacts are not indicated.