In JetBrains YouTrack before 2026.1.13901, 2026.2.17950 doS attack was possible via crafted type parameters (CVE-2026-75050)
A denial of service (DoS) vulnerability exists in JetBrains YouTrack versions before 2026.1.13901 and 2026.2.17950. The issue arises from crafted type parameters that can be used to trigger the DoS condition. The vulnerability has a high severity score of 7.1 (CVSS 3.1) and requires low privileges to exploit without user interaction.
AI Analysis
Technical Summary
CVE-2026-75050 is a denial of service vulnerability in JetBrains YouTrack affecting versions prior to 2026.1.13901 and 2026.2.17950. The flaw is triggered via specially crafted type parameters, leading to resource exhaustion or service disruption. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, low confidentiality impact, no integrity impact, and high availability impact. No known exploits in the wild have been reported. No explicit patch or remediation information is provided in the source data.
Potential Impact
Successful exploitation results in denial of service, causing unavailability of the YouTrack service. Confidentiality and integrity impacts are low or none. The attack can be performed remotely with low privileges and no user interaction, making it a significant availability risk.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor JetBrains advisories for updates and consider mitigating exposure by restricting access to the affected YouTrack instances until a fix is available.
In JetBrains YouTrack before 2026.1.13901, 2026.2.17950 doS attack was possible via crafted type parameters (CVE-2026-75050)
Description
A denial of service (DoS) vulnerability exists in JetBrains YouTrack versions before 2026.1.13901 and 2026.2.17950. The issue arises from crafted type parameters that can be used to trigger the DoS condition. The vulnerability has a high severity score of 7.1 (CVSS 3.1) and requires low privileges to exploit without user interaction.
CVSS v3.1
Score 7.1high
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-75050 is a denial of service vulnerability in JetBrains YouTrack affecting versions prior to 2026.1.13901 and 2026.2.17950. The flaw is triggered via specially crafted type parameters, leading to resource exhaustion or service disruption. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, low confidentiality impact, no integrity impact, and high availability impact. No known exploits in the wild have been reported. No explicit patch or remediation information is provided in the source data.
Potential Impact
Successful exploitation results in denial of service, causing unavailability of the YouTrack service. Confidentiality and integrity impacts are low or none. The attack can be performed remotely with low privileges and no user interaction, making it a significant availability risk.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor JetBrains advisories for updates and consider mitigating exposure by restricting access to the affected YouTrack instances until a fix is available.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-vpmg-58mp-x36w
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-75050"]
- Ecosystems
- []
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
Threat ID: 6a838c48bf8831d539b4c8c1
Added to database: 08/17/2026, 22:33:44 UTC
Last enriched: 08/17/2026, 22:56:22 UTC
Last updated: 08/18/2026, 02:41:00 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.