CVE-2026-49370

LowCVSS 3.4

Published: 29/05/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

14th percentile - higher than 14% of all known CVEs

Summary

In JetBrains YouTrack before version 2026.1.13162, an information disclosure vulnerability was possible on fetchApp requests, allowing attackers to access unauthorized data.

Risk Assessment

The risk involves potential disclosure of sensitive information stored in YouTrack, such as project data, issues, or configuration.

Recommendation

Upgrade YouTrack to version 2026.1.13162 or later immediately.

Original NVD description (English source)

In JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requests