CVE-2026-123325 | JetBrains YouTrack prior 2025.3.170763/2026.1.14150/2026.2.19656 Plugin Sandbox code injection

November 6, 2026 Yanac

A vulnerability labeled as critical has been found in JetBrains YouTrack. This affects an unknown function of the component Plugin Sandbox. The manipulation results in code injection.

This vulnerability was named CVE-2026-123325. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More