CVE-2026-62422: JetBrains Youtrack

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible

Affected products

• JetBrains Youtrack: before 2024.2.148429 (fixed in 2024.2.148429); from 2024.3.44799, before 2024.3.148430 (fixed in 2024.3.148430); from 2025.1.62455, before 2025.1.148120 (fixed in 2025.1.148120); from 2025.2.86069, before 2025.2.148048 (fixed in 2025.2.148048); from 2025.3.87341, before 2025.3.148033 (fixed in 2025.3.148033); from 2026.1.12024, before 2026.1.13757 (fixed in 2026.1.13757)

Published 2026-07-14. Last modified 2026-08-12.