CVE-2026-103494: Medium severity JetBrains YouTrack vulnerability
Published Oct 1, 2026
·Updated
In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes
Affected Software
1 affected component
JetBrains YouTrack<2026.2.19422
Event History
Oct 1, 2026
CVE Published
via MITRE·09:15 AM
Data Sourced
via MITRE·09:15 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
JetBrains YouTrack versions before 2026.2.19422 are affected. The supplied information does not identify any configuration-based exceptions.
2
What level of access does an attacker need?
Exploitation requires high privileges and can be performed over the network without user interaction. The issue involves changing user group memberships to achieve privilege escalation.
3
How serious is successful exploitation?
Successful exploitation can affect confidentiality, integrity, and availability at a high level. The reported severity is medium, with a CVSS score of 6.6.
4
What version should administrators upgrade to?
Upgrade YouTrack to version 2026.2.19422 or a later version. The provided data does not list a workaround for systems that cannot be upgraded immediately.