JetBrains YouTrack Improper Access Control Vulnerability Allowing Modification of MCP Tool Logic

A vulnerability in JetBrains YouTrack versions prior to 2025.3.104432 allows improper access control, which could be exploited to modify the logic of the MCP tool. This issue arises from inadequate authorization checks, enabling unauthorized users to make changes that could affect the tool's functionality.

Impact

Exploitation of this vulnerability could lead to unauthorized modifications in the MCP tool logic, potentially disrupting workflows or project management processes that rely on this functionality.

Remediation

Users can update to YouTrack version 2025.3.104432 or later to address this vulnerability.