CVE-2026-86488 | JetBrains YouTrack up to 2026.2.18633 ListConfig endpoint authorization

A vulnerability labeled as problematic has been found in JetBrains YouTrack up to 2026.2.18633. Affected is an unknown function of the component ListConfig endpoint. Executing a manipulation can lead to authorization bypass.

This vulnerability is registered as CVE-2026-86488. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More