AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

JetBrainsCVE-2026-75045

JetBrains YouTrack: authentication bypass

JetBrains

CVE-2026-75045 · Published Aug 17, 2026 · updated Sep 15, 2026

Critical9.1
Fix: upgrade to 2025.3.156085 or later (3 fixed versions below)
JetBrains advisory

In JetBrains YouTrack before 2025.3.156085,

2026.1.13913,

2026.2.18112 an unauthenticated attacker could download database backups via shared draft signature

Affected versions

PackageAffectedFixed in
YouTrack
Product
< 2025.3.156085, 2026.1.13913, 2026.2.181122025.3.156085, 2026.1.13913, 2026.2.18112
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-288

More JetBrains advisories

All JetBrains
Medium 4.4Aug 17JetBrains PyCharm: code executionCVE-2026-75059fixed in 2026.2.1High 8.4Aug 17JetBrains PyCharm: remote code executionCVE-2026-75060fixed in 2026.2.1High 7.1Aug 17JetBrains YouTrack: denial of serviceCVE-2026-75050fixed in 2026.1.13901 +1High 8.1Aug 17JetBrains YouTrack: missing authorizationCVE-2026-75051fixed in 2026.2.17917Low 3.6Aug 17JetBrains IntelliJ IDEA: command injectionCVE-2026-75052fixed in 2026.2.1Medium 5.4Aug 17JetBrains IntelliJ IDEA: server-side request forgeryCVE-2026-75053fixed in 2026.2.1