Description
In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | YouTrack | < 2025.3.121962 | 2025.3.121962 |
High · 8.8
CVE-2026-28193
EUVD-2026-8651GHSA-8p8j-jq9g-4f8j
In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint
Published Feb 25, 2026 · Updated Feb 26, 2026 · Assigned by JetBrains