CVE-2026-62422

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2026.1.13757 JetBrains YouTrack versions prior to 2025.3.148033 JetBrains YouTrack versions prior to 2025.2.148048 JetBrains YouTrack versions prior to 2025.1.148120 JetBrains YouTrack versions prior to 2024.3.148430 JetBrains YouTrack versions prior to 2024.2.148429

Description An authentication bypass exists in the core authentication and session handling logic. This occurs when an attacker obtains direct access to the underlying database through methods such as exposed database services, stolen credentials, or a compromised host. The issue stems from improper enforcement of authentication and authorization, as well as undue trust in the identity and session state stored in the database. By manipulating or forging authentication records, an attacker can gain full administrative access, allowing for the takeover of projects, user management, configuration changes, and widespread data exposure.

Recommendations Update to version 2026.1.13757. Update to version 2025.3.148033. Update to version 2025.2.148048. Update to version 2025.1.148120. Update to version 2024.3.148430. Update to version 2024.2.148429.