Volerion logoVolerion
Volerion logoVolerion

JetBrains YouTrack Missing Permission Checks in App Permissions Endpoint Allow Unauthorized Access

Vulnerability

A vulnerability exists in JetBrains YouTrack versions prior to 2025.3.121962, where applications could send requests to the app permissions endpoint without proper authorization. This flaw could lead to unauthorized access or manipulation of app permissions.

Impact

Exploitation of this vulnerability could result in unauthorized access to or modification of app permissions, potentially allowing apps to perform actions or access data they should not be permitted to.

Remediation

Users can update to JetBrains YouTrack version 2025.3.121962 or later to address this vulnerability.

Added: Feb 25, 2026, 4:58 PM
Updated: Feb 25, 2026, 4:58 PM

Vulnerability Rating

Custom Algorithm
spread
5.0
impact
1.3
exploitability
3.8
remediation
7.7
relevance
3.2
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.