high7.7
CVE-2026-86498
In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed modification linked entities without update permission
Impact
In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed modification linked entities without update permission
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| JetBrains | JetBrains YouTrack | before 2025.3.160480 |
Versions were read from the advisory text. No structured product data has been published for this record yet.