CVE-2026-75049: Medium severity JetBrains YouTrack vulnerability
Published Aug 17, 2026
·Updated
In JetBrains YouTrack before 2026.1.13903, 2026.2.17950 an authenticated user could read restricted articles from other projects via the draft creation endpoint
Affected Software
1 affected component
JetBrains YouTrack<2026.1.13903, =2026.2.17950
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
JetBrains YouTrackto a version that resolves this vulnerability.Fixed in 2026.1.13903
Event History
Aug 17, 2026
CVE Published
via NVD·04:17 PM
Data Sourced
via NVD·04:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-75049?
CVE-2026-75049 has a medium severity level with a CVSS score of 6.5.
2
How do I fix CVE-2026-75049?
To mitigate CVE-2026-75049, update JetBrains YouTrack to version 2026.1.13903 or 2026.2.17950 or later.
3
Who is affected by CVE-2026-75049?
Authenticated users of JetBrains YouTrack versions prior to 2026.1.13903 and 2026.2.17950 are affected by CVE-2026-75049.
4
What information can be accessed due to CVE-2026-75049?
CVE-2026-75049 allows authenticated users to read restricted articles from other projects.
5
When was CVE-2026-75049 published?
CVE-2026-75049 was published on August 17, 2026.