CVE-2026-75049

MEDIUM 6.5CVE-2026-75049 · Published 17/08/2026 · updated 23/10/2026

In short

CVE-2026-75049 is a MEDIUM (CVSS 6.5) vulnerability affecting youtrack (jetbrains).
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 27.5% of all vulnerabilities.
Fix: update to 2026.2.17950, 2026.1.13903 or later.

Package	Affected versions	Patched versions
youtrack jetbrains	`≥ 2026.2, < 2026.2.17950< 2026.1.13903`	`2026.2.179502026.1.13903`

Description

In JetBrains YouTrack before 2026.1.13903, 2026.2.17950 an authenticated user could read restricted articles from other projects via the draft creation endpoint

References

jetbrains.com/privacy-security/issues-fixed · Vendor Advisory

More vulnerabilities in youtrack

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free