Description
In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading users' private data via the comment templates endpoint
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | YouTrack | < 2026.2.16593 | 2026.2.16593 |
Medium · 4.3
CVE-2026-57921
EUVD-2026-39653GHSA-q339-r244-45h2
In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading users' private data via the comment templates endpoint
Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by JetBrains