CVE-2026-123334: Low severity vulnerability

Published Nov 6, 2026

Updated

In JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another project

Event History

Nov 6, 2026

CVE Published

via MITRE·10:28 AM

Data Sourced

via MITRE·10:28 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

A project administrator of a related project can exploit it. The issue does not apply to unauthenticated users or users without project-administrator privileges.

What is the impact of successful exploitation?

An attacker can delete VCS integrations owned by another project. The provided severity vector indicates integrity and availability impact, with no confidentiality impact.

Which versions are affected?

JetBrains YouTrack versions before 2026.2.19562 are affected. Upgrading to 2026.2.19562 or later addresses the issue.

CVE-2026-123334: Low severity vulnerability

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the impact of successful exploitation?

Which versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the impact of successful exploitation?

Which versions are affected?