CVE-2026-75049

MediumCVSS 6.5

Published: 17/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Summary

In JetBrains YouTrack before 2026.1.13903 and 2026.2.17950, an authenticated user could read restricted articles from other projects via the draft creation endpoint.

Risk Assessment

An authenticated user could access confidential information from other projects, compromising data integrity and potentially leading to information leakage.

Recommendation

Update YouTrack to version 2026.1.13903, 2026.2.17950, or later to fix the vulnerability.

Original NVD description (English source)

In JetBrains YouTrack before 2026.1.13903, 2026.2.17950 an authenticated user could read restricted articles from other projects via the draft creation endpoint