← All advisories

High severity8.5NVD Advisory· Published Sep 7, 2026· Updated Sep 8, 2026

CVE-2026-86492

CVE-2026-86492

Description

In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tokens

Affected products

1

Jetbrains/Youtrackllm-fuzzy
Range: <2026.2.18634

Patches

Vulnerability mechanics

References

1

www.jetbrains.com/privacy-security/issues-fixed/nvd

News mentions

1

JetBrains YouTrack: 22 Vulnerabilities Disclosed, Ranging from Account Takeover to Privilege Escalation
Vypr Intelligence · Sep 7, 2026