MinorCritical vulnerability
CVE-2026-103488 (CVSS 7.1)
NVD · officialPublished Oct 1, 2026Risk 23/100
In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues
Technical details
CVSS
7.1
AV:NetworkAC:LowPR:LowUI:NoneC:HighI:LowA:None
Evidence and sources
This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.
Open primary source