CVE-2026-57923: High severity JetBrains YouTrack vulnerability
In JetBrains YouTrack before 2026.2.16593 improper authorisation in the app configurations endpoint allowed modifying project settings
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
JetBrains YouTrackto a version that resolves this vulnerability.Fixed in 2026.2.16593 - Compensating control
Restrict network and/or access to the YouTrack app configurations endpoint so only authorized administrators can reach it until the fix (2026.2.16593) is applied.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-57923?
The severity of CVE-2026-57923 is rated as medium with a score of 5.3.
How do I fix CVE-2026-57923?
To fix CVE-2026-57923, upgrade to JetBrains YouTrack version 2026.2.16593 or later.
What does CVE-2026-57923 allow an attacker to do?
CVE-2026-57923 allows an attacker to modify project settings due to improper authorization in the app configurations endpoint.
What versions of JetBrains YouTrack are affected by CVE-2026-57923?
CVE-2026-57923 affects all versions of JetBrains YouTrack before 2026.2.16593.
When was CVE-2026-57923 published?
CVE-2026-57923 was published on June 26, 2026.