CVE-2026-86498

JetBrains YouTrack versions prior to 2025.3.160480 and 2026.1.14047 are vulnerable to unauthorized modifications of linked entities through pUT requests on sub-resources, bypassing necessary update permissions. This flaw could lead to unauthorized data manipulation, potentially compromising project integrity and user trust. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.