CVE-2026-75045 is a critical security vulnerability in JetBrains YouTrack versions prior to 2025.3.156085, 2026.1.13913, and 2026.2.18112. It enables unauthenticated attackers to download database backups by leveraging a shared draft signature mechanism. This vulnerability corresponds to CWE-288 (Authentication Bypass Using an Alternate Path or Channel). The CVSS 3.1 base score is 9.1, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality and integrity. No known exploits in the wild have been reported. The affected versions are explicitly stated in the description, but no patch links or vendor advisories are provided in the input data.

An attacker without authentication can access and download sensitive database backups, leading to a complete compromise of confidentiality and integrity of the affected YouTrack instance's data. This could expose sensitive project management information and user data. Availability is not impacted. The vulnerability's critical severity is supported by the CVSS score of 9.1.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The input data does not include patch links or official vendor advisories. Users should monitor JetBrains communications for updates and apply official patches once available. Until then, restricting access to YouTrack instances and backups, and reviewing shared draft permissions may reduce risk.