CVE-2026-123337: Low severity vulnerability

Published Nov 6, 2026

Updated

In JetBrains YouTrack before 2026.2.19656 users without update permission could change issue visibility

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade JetBrains YouTrack to a version that resolves this vulnerability.
Fixed in 2026.2.19656

Event History

Nov 6, 2026

CVE Published

via MITRE·10:28 AM

Data Sourced

via MITRE·10:28 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

A user who does not have update permission can exploit it. Exploitation is network-accessible but requires high attack complexity and does not require user interaction.

What is the impact of successful exploitation?

An unauthorized user could change an issue's visibility, which may expose information to unintended viewers. The provided severity vector indicates low confidentiality impact and no integrity or availability impact.

Which deployments are affected?

JetBrains YouTrack versions before 2026.2.19656 are affected. The provided data does not state whether any particular default configuration is required.

CVE-2026-123337: Low severity vulnerability

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the impact of successful exploitation?

Which deployments are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the impact of successful exploitation?

Which deployments are affected?