This vulnerability in JetBrains YouTrack prior to version 2026.1.13570 is caused by improper access control, specifically CWE-862, which permits users with low privileges to modify service accounts. The CVSS 3.1 score of 6.5 reflects that the vulnerability can be exploited remotely over the network with low attack complexity and no user interaction, resulting in a high impact on integrity but no impact on confidentiality or availability. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation must be managed by the user.

Exploitation of this vulnerability allows low-privileged users to modify service accounts within YouTrack, potentially leading to unauthorized changes that affect system integrity. There is no impact on confidentiality or availability according to the CVSS vector. No known exploits have been reported in the wild, so the immediate risk appears limited but could increase if exploitation techniques emerge.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is documented, users should monitor JetBrains advisories closely and restrict access to YouTrack service accounts to trusted administrators until a patch is available.