CVE-2026-86489

An insecure direct object reference (IDOR) vulnerability in JetBrains YouTrack prior to version 2026.2.18634 allows unauthorized access to private issues and starred folders across different organizations through the user profile API. This could lead to the exposure of sensitive information, impacting user privacy and data security. Organizations using affected versions should prioritize remediation to protect their data integrity and user confidentiality.