CVE Catalog
CVE-2026-59791
LowCVSS 3.5Exploitation Probability (EPSS)
Low risk0.14%
3th percentile - higher than 3% of all known CVEs
Summary
In JetBrains YouTrack before version 2026.2.17012, a cSS injection vulnerability was discovered via Mermaid diagram rendering. An attacker could exploit this flaw to modify page appearance or potentially steal data.
Risk Assessment
The risk involves a cSS injection attack that could lead to page defacement, sensitive information leakage, or further attacks on users.
Recommendation
It is recommended to immediately upgrade JetBrains YouTrack to version 2026.2.17012 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
In JetBrains YouTrack before 2026.2.17012 cSS injection via Mermaid diagram rendering was possible