Jetbrains Youtrack — CVE-2026-100273 (Critical)

Date Sep 30, 2026
Type Vendor advisory
Signal Critical vendor advisory
Vendor / Product Jetbrains · Youtrack
CVE CVE-2026-100273
Critical vendor advisory CVE-2026-100273

Summary

In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts debugger allowed arbitrary code execution

Why it matters

This CVE carries a CRITICAL severity rating (CVSS 8.2) in Jetbrains Youtrack. Patch or mitigate promptly. EPSS percentile: 20%.

Operator check

Review CVE-2026-100273 in your asset inventory. Apply patches per vendor guidance and verify Youtrack is not exposed. CVSS score: 8.2. EPSS probability: 0.3%; percentile: 20%.

Sources

PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.