CVE-2025-22178: Atlassian Jira Align

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view items on the "Why" page.

Affected products

• Atlassian Jira Align: from 11.14.0, before 11.16.1 (fixed in 11.16.1)

Published 2025-10-22. Last modified 2026-10-08.