JetBrains YouTrack Race Condition Vulnerability Allowing Helpdesk Agent Limit Bypass

A race condition vulnerability has been identified in JetBrains YouTrack, prior to version 2025.3.104432, allowing users to bypass the helpdesk agent limit. This issue arises from improper synchronization, which could be exploited to manipulate the agent-user limit, potentially leading to unauthorized access or actions within the application.

Impact

Exploitation of this vulnerability could lead to unauthorized bypassing of helpdesk agent limits, allowing users to exceed their allocated agent allowances and potentially access additional functionalities or data.

Remediation

Users can update to JetBrains YouTrack version 2025.3.104432 or later to address this vulnerability.