CVE-2026-86494: High severity JetBrains YouTrack vulnerability
Published Sep 7, 2026
·Updated
In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links on inaccessible issues
Affected Software
1 affected component
JetBrains YouTrack<2026.2.18634
Event History
Sep 7, 2026
CVE Published
via MITRE·04:26 PM
Data Sourced
via MITRE·04:26 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An attacker needs low-level privileges in JetBrains YouTrack and network access. Exploitation does not require user interaction.
2
What access or data can be affected?
The issue can allow unauthorized modification of links on issues that are otherwise inaccessible to the attacker. The provided impact data indicates integrity impact, with no stated confidentiality or availability impact.
3
Which deployments are affected?
JetBrains YouTrack versions before 2026.2.18634 are affected. The provided information does not state whether any specific default configuration is required.