CVE-2026-75045: jetbrains youtrack

CVSS 9.1 (critical) · published 2026-08-17

In JetBrains YouTrack before 2025.3.156085, 2026.1.13913, 2026.2.18112 an unauthenticated attacker could download database backups via shared draft signature

Affected products (NVD): jetbrains youtrack

Fixed in (NVD): 2025.3.156085, 2026.1.13913, 2026.2.18112

Weakness: CWE-288

Source: NVD CVE-2026-75045

References

• https://www.jetbrains.com/privacy-security/issues-fixed/

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.