AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

JetBrainsCVE-2026-75049

JetBrains YouTrack: missing authorization

JetBrains

CVE-2026-75049 · Published Aug 17, 2026 · updated Sep 15, 2026

Medium6.5
Fix: upgrade to 2026.1.13903 or later (2 fixed versions below)
JetBrains advisory

In JetBrains YouTrack before 2026.1.13903,

2026.2.17950 an authenticated user could read restricted articles from other projects via the draft creation endpoint

Affected versions

PackageAffectedFixed in
YouTrack
Product
< 2026.1.13903, 2026.2.179502026.1.13903, 2026.2.17950
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-862

More JetBrains advisories

All JetBrains
Medium 4.4Aug 17JetBrains PyCharm: code executionCVE-2026-75059fixed in 2026.2.1High 8.4Aug 17JetBrains PyCharm: remote code executionCVE-2026-75060fixed in 2026.2.1High 7.1Aug 17JetBrains YouTrack: denial of serviceCVE-2026-75050fixed in 2026.1.13901 +1High 8.1Aug 17JetBrains YouTrack: missing authorizationCVE-2026-75051fixed in 2026.2.17917Low 3.6Aug 17JetBrains IntelliJ IDEA: command injectionCVE-2026-75052fixed in 2026.2.1Medium 5.4Aug 17JetBrains IntelliJ IDEA: server-side request forgeryCVE-2026-75053fixed in 2026.2.1