CVE-2026-86489

MEDIUM CVSS: 6.5 Published: 2026-09-07 Modified: 2026-09-08

Description

In JetBrains YouTrack before 2026.2.18634 an IDOR in the user profile API disclosed private issues and starred folders across organizations

Affected Platforms

Unknown

Weakness Type

CWE-639

References

https://www.jetbrains.com/privacy-security/issues-fixed/