CVE-2026-86488

JetBrains YouTrack versions prior to 2026.2.18634 are vulnerable to an insecure direct object reference (iDOR) that allows unauthorized access to private saved searches through the watchRules and issueListConfig endpoints. This could lead to the exposure of sensitive information, impacting user privacy and data integrity. Organizations using affected versions should prioritize patching to mitigate potential data leaks.