CVE-2026-86478

JetBrains YouTrack versions prior to 2025.3.161254 and 2026.1.14042 are vulnerable to improper authentication in the Helpdesk feature, enabling unauthenticated attackers to take over accounts by asserting control over an email address. This critical vulnerability poses a significant risk to organizations using YouTrack for project management and issue tracking, as it could lead to unauthorized access and potential data breaches. Administrators should prioritize patching affected versions to mitigate this severe security threat.