CVE-2026-62422 is an authentication bypass vulnerability in JetBrains YouTrack that affects multiple versions prior to 2026.1.13757 and several 2025 and 2024 releases. The vulnerability arises from missing authentication controls (CWE-306) when accessing the database directly, enabling an attacker to gain administrative access without proper credentials. The vulnerability has a critical CVSS 3.1 score of 10.0, reflecting its high impact and ease of exploitation over the network without privileges or user interaction. The vendor has published the vulnerability but has not yet provided an official fix or remediation level. The affected product is not a cloud service, so remediation depends on applying vendor patches or mitigations once available. No exploits are currently known in the wild.

Successful exploitation allows an attacker with direct database access to bypass authentication mechanisms and obtain administrative privileges in YouTrack. This results in full system compromise, including complete confidentiality, integrity, and availability loss. Given the critical CVSS score of 10.0, the impact is severe and could lead to total control over the affected YouTrack instance.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, organizations should restrict and monitor direct database access to YouTrack instances as a temporary mitigation. Follow JetBrains advisories closely for updates on patches or official mitigations. No vendor advisory states that no action is required or that the issue is already mitigated.