CVE-2026-86484

JetBrains YouTrack versions prior to 2026.2.18634 are vulnerable to a stored cross-site scripting (XSS) attack due to an AngularJS template injection in assignee names. This vulnerability could allow attackers to execute arbitrary scripts in the context of the affected application, potentially compromising user data and session integrity. Organizations using YouTrack should prioritize patching this vulnerability to mitigate the risk of exploitation.