CVE-2026-86482: High severity JetBrains YouTrack vulnerability

Q: What level of access does an attacker need to exploit this issue?

An attacker needs low-privileged access to JetBrains YouTrack. The vulnerability does not require user interaction and is remotely exploitable.

Q: What is the potential impact if exploitation succeeds?

Unchecked group membership changes can allow privilege escalation. The reported impact includes high confidentiality, integrity, and availability impact.

Q: Which YouTrack versions are affected?

JetBrains YouTrack versions before 2026.2.18634 are affected. Upgrade to 2026.2.18634 or a later version.

Published Sep 7, 2026

Updated

In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege escalation

Affected Software

1 affected component

JetBrains YouTrack<2026.2.18634

Event History

Sep 7, 2026

CVE Published

via MITRE·04:26 PM

Data Sourced

via MITRE·04:26 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

An attacker needs low-privileged access to JetBrains YouTrack. The vulnerability does not require user interaction and is remotely exploitable.

What is the potential impact if exploitation succeeds?

Unchecked group membership changes can allow privilege escalation. The reported impact includes high confidentiality, integrity, and availability impact.

Which YouTrack versions are affected?