CVE-2026-75047 is a medium severity vulnerability in JetBrains YouTrack that allows an attacker with low privileges to cause a denial of service by sending a specially crafted decompression bomb to the import endpoint. This triggers resource exhaustion due to improper handling of decompression, leading to service unavailability. The vulnerability is classified under CWE-409, indicating improper management of critical state data. There is no official remediation level or patch explicitly stated in the available data, and no known exploits in the wild have been reported.

The vulnerability can cause a denial of service condition, impacting availability of the YouTrack service. There is no impact on confidentiality or integrity according to the CVSS vector. The attack requires network access and low privileges but no user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the import endpoint or implementing rate limiting to mitigate potential exploitation.