CVE-2025-22170: Atlassian Jira Align

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an action could if they included a particular state-related parameter of a user with sufficient privileges to perform the action.

Affected products

• Atlassian Jira Align: from 11.14.0, before 11.16.1 (fixed in 11.16.1)

Published 2025-10-22. Last modified 2026-10-08.