CVE-2026-103490: High severity JetBrains YouTrack vulnerability

Q: Which YouTrack versions are affected?

JetBrains YouTrack versions before 2026.2.19422 are affected. Upgrading to 2026.2.19422 or later addresses the reported issue.

Q: What access does an attacker need to exploit this issue?

The vector indicates network exploitation with low attack complexity, but the attacker must already hold high privileges. No user interaction is required.

Q: What is the potential impact of successful exploitation?

Successful exploitation can result in privilege escalation and has high potential impact on confidentiality, integrity, and availability.

Published Oct 1, 2026

Updated

In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group links

Affected Software

1 affected component

JetBrains YouTrack<2026.2.19422

Event History

Oct 1, 2026

CVE Published

via MITRE·09:15 AM

Data Sourced

via MITRE·09:15 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which YouTrack versions are affected?

JetBrains YouTrack versions before 2026.2.19422 are affected. Upgrading to 2026.2.19422 or later addresses the reported issue.

What access does an attacker need to exploit this issue?

The vector indicates network exploitation with low attack complexity, but the attacker must already hold high privileges. No user interaction is required.

What is the potential impact of successful exploitation?