CVE-2026-86479

JetBrains YouTrack versions prior to 2026.2.18788, 2026.1.14055, and 2025.3.161254 are vulnerable to an authorization bypass due to an Insecure Direct Object Reference (IDOR), allowing unauthorized access to restricted REST API resources. This vulnerability poses a high risk as it could lead to exposure of sensitive data or manipulation of project resources. Organizations using affected versions should prioritize remediation to safeguard their project management environments.