CVE-2026-28193 - Vulnerability Analysis

Overview

JetBrains YouTrack < 2025.3.121962 contains an insecure access control vulnerability caused by apps being able to send requests to the app permissions endpoint, letting attackers potentially manipulate permissions, exploit requires app access.

Severity & Score

Impact

Attackers with app access can manipulate app permissions, potentially leading to unauthorized actions or privilege escalation.

Mitigation

Upgrade to version 2025.3.121962 or later.

References

• https://www.jetbrains.com/privacy-security/issues-fixed/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner