A vulnerability in JetBrains YouTrack permits an attacker who can access the scripts debugger to bypass authorization checks and execute code with the privileges of the underlying process. This flaw allows the attacker to run arbitrary code, potentially compromising confidentiality, integrity, or availability of the entire system. The ability to execute code follows directly from the authorization bypass, and the impact is limited to systems where the scripts debugger feature is enabled and accessible.

JetBrains YouTrack applications with versions preceding 2026.2.19197 are affected. No additional vendor or product variants are listed. The vulnerability manifests in the scripts debugger component of YouTrack; versions after 2026.2.19197 contain the fix.

The CVSS score of 8.2 indicates a high severity. The EPSS score is not available, and the vulnerability is not currently listed in the CISA KEV catalog. Based on the description, the likely attack vector is an authenticated user who has some level of access to the YouTrack instance and can invoke the scripts debugger. Exploitation requires the ability to trigger scripts debugger actions; there is no mention of remote unauthenticated exploitation. However, once an authenticated attacker gains code execution, they can perform any action allowed by the underlying OS or container, effectively compromising the entire deployment.