ReDoS Vulnerability in JetBrains YouTrack via Mailbox Regex

Executive Summary

This vulnerability is a regular expression denial of service (ReDoS) issue in JetBrains YouTrack versions before 2026.2.19197. It allows an attacker to cause excessive CPU consumption by exploiting a flaw in the mailbox regex mail-rule filters, potentially leading to system slowdowns or crashes.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability is specific to JetBrains YouTrack before version 2026.2.19197 and involves a ReDoS attack via mailbox regex mail-rule filters. Detection requires checking the installed YouTrack version and reviewing mail-rule configurations for vulnerable regex patterns.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can impact you by degrading or completely disrupting the availability of your JetBrains YouTrack instance. This could prevent users from accessing the system, delay responses, or cause the application to become unresponsive due to high CPU usage.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows a ReDoS attack via mailbox regex mail-rule filters in JetBrains YouTrack before 2026.2.19197. This could lead to denial of service, potentially disrupting availability of systems handling sensitive data. For GDPR, availability is a key principle, so prolonged outages may impact compliance. HIPAA requires safeguards against disruptions, but this specific issue does not directly violate either standard without additional context.

Useful 0 Not Useful 0

Mitigation Strategies

Update JetBrains YouTrack to version 2026.2.19197 or later to address the ReDoS vulnerability in mailbox regex mail-rule filters.

Useful 0 Not Useful 0