CVE-2026-49369
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
A vulnerability was found in JetBrains YouTrack before version 2026.1.13162 that allows information disclosure on the Users and Groups pages.
Risk Assessment
An attacker can access sensitive information about users and groups, potentially compromising data confidentiality.
Recommendation
Update YouTrack to version 2026.1.13162 or later.
Other vulnerabilities in YouTrack
See all- CVE-2026-75045Critical
In JetBrains YouTrack before 2025.3.156085, 2026.1.13913, 2026.2.18112 an unauthenticated attacker could download database backups via shared draft signature
- CVE-2026-49370Low
In JetBrains YouTrack before version 2026.1.13162, an information disclosure vulnerability was possible on fetchApp requests, allowing attackers to access unauthorized data.
Original NVD description (English source)
In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on Users and Groups pages