CVE-2026-103496

JetBrains YouTrack versions prior to 2026.2.19422 are vulnerable to an Insecure Direct Object Reference (iDOR) in inbox threads, which allows unauthorized users to access and read notifications intended for other users. This vulnerability could lead to potential information disclosure, impacting user privacy and data confidentiality. Organizations using affected versions should prioritize remediation to safeguard sensitive user notifications.