Medium · 6.5 CVE-2026-75049 EUVD-2026-60248GHSA-924r-pw97-j2gg

In JetBrains YouTrack before 2026.1.13903, 2026.2.17950 an authenticated user could read restricted articles from other projects via the dr…

Published Aug 17, 2026 · Updated Aug 17, 2026 · Assigned by JetBrains

Description

In JetBrains YouTrack before 2026.1.13903,
2026.2.17950 an authenticated user could read restricted articles from other projects via the draft creation endpoint

Affected products

Vendor	Product	Affected	Fixed
JetBrains	YouTrack	< 2026.1.13903, 2026.2.17950	2026.1.13903, 2026.2.17950

References

https://www.jetbrains.com/privacy-security/issues-fixed/