CVE-2026-75050

Analyzed Analyzed - Analysis Complete

Denial of Service in JetBrains YouTrack

Publication date: 2026-08-17

Last updated on: 2026-09-15

Assigner: JetBrains s.r.o.

Description

In JetBrains YouTrack before 2026.1.13901, 2026.2.17950 doS attack was possible via crafted type parameters

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-17

Last Modified

2026-09-15

Generated

2026-09-28

AI Q&A

2026-08-17

EPSS Evaluated

2026-09-26

NVD

CVE-2026-75050

EUVD

EUVD-2026-60249

Affected Vendors & Products

Vendor	Product	Version / Range
jetbrains	youtrack	to 2026.1.13901 (exc)
jetbrains	youtrack	From 2026.2 (inc) to 2026.2.17950 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-770	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

Executive Summary

In JetBrains YouTrack before versions 2026.1.13901 and 2026.2.17950, a denial-of-service (DoS) attack was possible due to crafted type parameters. This means an attacker could exploit this flaw to disrupt the availability of the YouTrack service.

Detection Guidance

This vulnerability involves a DoS attack via crafted type parameters in JetBrains YouTrack. To detect it, monitor for unusual traffic patterns or crashes in YouTrack instances. Check logs for malformed requests or errors related to type parameters. Ensure your YouTrack version is updated to 2026.1.13901 or later.

Impact Analysis

If you use an affected version of JetBrains YouTrack, this vulnerability could allow an attacker to cause service disruptions, making the system unavailable for legitimate users. This could affect productivity and access to critical data stored in YouTrack.

Compliance Impact

The vulnerability enables a DoS attack via crafted type parameters in JetBrains YouTrack before 2026.1.13901 and 2026.2.17950. This could disrupt service availability, potentially violating compliance requirements for GDPR (availability principle) and HIPAA (accessibility and integrity of data).

Mitigation Strategies

Update JetBrains YouTrack to version 2026.1.13901 or later, or 2026.2.17950 or later to address the DoS vulnerability.

Hi! I’m here to help you understand CVE-2026-75050. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70