Medium · 5.4 CVE-2026-123330 EUVD-2026-118094GHSA-5c33-xmjp-fcgc

In JetBrains YouTrack before 2026.2.19562 missing authorization allowed users with read-only access to change issue visibility settings

Published Nov 6, 2026 · Updated Nov 6, 2026 · Assigned by JetBrains

Vendor: JetBrains Product: YouTrack

Description

In JetBrains YouTrack before 2026.2.19562 missing authorization allowed users with read-only access to change issue visibility settings

Affected products

Vendor	Product	Affected	Fixed
JetBrains	YouTrack	< 2026.2.19562	2026.2.19562

Advisories 1

WID-SEC-2026-4378 JetBrains You Track: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 8, 2026

References

https://www.jetbrains.com/privacy-security/issues-fixed/