CVE-2026-86497

JetBrains YouTrack versions prior to 2026.2.18769 are vulnerable to a security flaw that permits project administrators to change a mailbox host without requiring re-authentication, potentially leading to the exfiltration of stored mailbox credentials. This vulnerability could compromise sensitive information, making it critical for organizations using affected versions to prioritize updates. Users managing project administration in YouTrack should take immediate action to mitigate this risk.