CVE-2026-123335: Low severity vulnerability

Published Nov 6, 2026

Updated

In JetBrains YouTrack before 2026.2.19562, 2026.1.14137, 2025.3.169041 missing authorization allowed attaching tags to any issue via the tag issues collection

Event History

Nov 6, 2026

CVE Published

via MITRE·10:28 AM

Data Sourced

via MITRE·10:28 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker needs low-level authenticated access to YouTrack and must be able to induce user interaction. The issue affects authorization for attaching tags through the tag issues collection.

Which YouTrack versions are affected?

The vulnerability affects YouTrack versions before 2026.2.19562, 2026.1.14137, and 2025.3.169041.

What is the impact of successful exploitation?

Successful exploitation allows tags to be attached to issues without the required authorization. The reported impact is limited to integrity; no confidentiality or availability impact is indicated.

CVE-2026-123335: Low severity vulnerability

Event History

Frequently Asked Questions

Who can exploit this issue?

Which YouTrack versions are affected?

What is the impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which YouTrack versions are affected?

What is the impact of successful exploitation?