The vulnerability in JetBrains YouTrack occurs because an authorization check in the scripts debugger is incorrectly implemented. This flaw allows a user who can access the debugger to view or suspend workflow scripts that should otherwise be protected. Consequently attackers may expose sensitive automation logic or disrupt system operations by disabling critical scripts.

JetBrains YouTrack releases older than version 2026.2.19197 are affected. The vulnerability applies to all installations of these releases regardless of configuration, as the flaw is inherent to the debugger component.

The flaw carries a CVSS score of 7.1, indicating moderate severity. EPSS data is not provided and the vulnerability is not listed in CISA KEV. While no public exploits are known, exploitation requires access to the scripts debugger, a capability typically restricted to privileged users or obtained through a compromised debugger session; this limitation reduces the attack surface. If exploited, the attacker can leak confidential workflow logic (confidentiality) or alter system behavior by suspending scripts (integrity and availability).