CVE-2026-123332: Medium severity vulnerability

Published Nov 6, 2026

Updated

In JetBrains YouTrack before 2026.2.19562 missing authorization allowed Project Admin to manage VCS hosting server configurations

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade JetBrains YouTrack to a version that resolves this vulnerability.
Fixed in 2026.2.19562

Event History

Nov 6, 2026

CVE Published

via MITRE·10:28 AM

Data Sourced

via MITRE·10:28 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·11:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An authenticated user with the Project Admin role can exploit the missing authorization to manage VCS hosting server configurations.

Are unauthenticated or low-privileged users affected?

The provided information identifies Project Admin privileges as required. It does not indicate that unauthenticated users or users without that role can exploit the issue.

Which deployments need remediation?

JetBrains YouTrack versions before 2026.2.19562 are affected. Upgrading to 2026.2.19562 or later addresses the affected version range.

CVE-2026-123332: Medium severity vulnerability

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

Are unauthenticated or low-privileged users affected?

Which deployments need remediation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Are unauthenticated or low-privileged users affected?

Which deployments need remediation?