CVE-2026-100277

Summary

A flaw in JetBrains YouTrack allowed account takeover through replaying a notification signature, posing a significant security risk.

Exploitability

Exploitation requires access to a notification signature, making it moderately difficult. Precondition is the attacker must have intercepted or obtained a valid notification signature.

Blast radius

If exploited, this could lead to unauthorized access and control over user accounts, with potential for data exfiltration or manipulation of project data.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to YouTrack 2026.2.19197 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.