JetBrains YouTrack incorrect authorisation in scripts debugger allows workflow script disclosure and suspension
Attackers can peek at and halt automation scripts in this issue tracker.
Summary
Incorrect authorisation in the scripts debugger of YouTrack lets attackers view and suspend workflow scripts. Versions before 2026.2.19197 are affected.
What to do
Update to YouTrack 2026.2.19197 or later.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen