CVE-2025-22169: Atlassian Jira Align

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to subscribe to an item/object without having the expected permission level.

Affected products

• Atlassian Jira Align: from 11.14.0, before 11.16.1 (fixed in 11.16.1)

Published 2025-10-22. Last modified 2026-10-08.