High · 7.1 CVE-2026-123325 EUVD-2026-118089GHSA-w3jx-8jw5-vf7p

In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandb…

Published Nov 6, 2026 · Updated Nov 7, 2026 · Assigned by JetBrains

Description

In JetBrains YouTrack before 2025.3.170763,
2026.1.14150,
2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandbox page

Vendor	Product	Affected	Fixed
JetBrains	YouTrack	< 2025.3.170763, 2026.1.14150, 2026.2.19656	2025.3.170763, 2026.1.14150, 2026.2.19656