CVE-2026-100267
Awaiting Analysis Awaiting Analysis - Queue

ReDoS Vulnerability in JetBrains YouTrack via Mailbox Regex

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: JetBrains s.r.o.

Description
In JetBrains YouTrack before 2026.2.19197 reDoS attack was possible via mailbox regex mail-rule filters

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-30
Last Modified
2026-09-30
Generated
2026-09-30
AI Q&A
2026-09-30
EPSS Evaluated
N/A
NVD
CVE-2026-100267
EUVD
EUVD-2026-90011

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
jetbrains youtrack to 2026.2.19197 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1333 The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a regular expression denial of service (ReDoS) issue in JetBrains YouTrack versions before 2026.2.19197. It allows an attacker to cause excessive CPU consumption by exploiting a flaw in the mailbox regex mail-rule filters, potentially leading to system slowdowns or crashes.

Impact Analysis

The vulnerability can impact you by degrading or completely disrupting the availability of your JetBrains YouTrack instance. This could prevent users from accessing the system, delay responses, or cause the application to become unresponsive due to high CPU usage.

Mitigation Strategies

Update JetBrains YouTrack to version 2026.2.19197 or later to address the ReDoS vulnerability in mailbox regex mail-rule filters.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100267. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart