CVE-2026-100262

JetBrains YouTrack versions prior to 2026.2.18991 are vulnerable due to a missing authorization flaw that permits users with read-only project access to overwrite project notification templates. This could lead to unauthorized modifications of project notifications, potentially disrupting communication and project management workflows. Organizations using YouTrack should prioritize remediation to safeguard their project integrity and prevent misuse by unauthorized users.