Cross-Project Command Execution via Mail Rules in JetBrains YouTrack

In JetBrains YouTrack before 2026.2.19575 2026.3.16075 2026.3.16397 2026.3.16402 mail rules allowed a project admin to execute cross-project issue commands

Unauthenticated Path Traversal in JetBrains Datalore Report Blob Endpoint

In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files

Deserialization Vulnerability Allows Remote Code Execution in TeamCity

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible

Stored Cross‑Site Scripting in Classic Project Overview of JetBrains TeamCity

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible

Stored Cross‑Site Scripting in TeamCity Build Log

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible

SQL Injection in JetBrains Exposed Prior to 1.5.1

In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions

Kotlin DSL Sandbox Escape Allows Remote Code Execution in JetBrains TeamCity

In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible

Local Repository Access via Unvalidated Git Submodule URLs

In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server

In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata

Authenticated Command Execution via CRLF Injection in TeamCity Pipeline Git Settings

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection in Pipeline Git connection settings

TeamCity Sandbox Escape via Kotlin DSL Settings Enables Code Execution

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL

Missing Authorization Allows Self‑Add to Project Teams in JetBrains YouTrack

In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues

HTML Injection in VCS Command Failure Notifications in JetBrains YouTrack

In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible

Privileged Escalation via User Group Links in JetBrains YouTrack

In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group links

Administrator Account Takeover via Password Reset in JetBrains TeamCity

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset

Remote Code Execution via Structural Search Script Constraints in JetBrains IntelliJ IDEA

In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projects

YouTrack SSRF via Stored X‑HTML Injection in PDF Export

In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF export

Missing Authorization Allows Read-Only Users to View Project Settings in JetBrains YouTrack

In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings

YouTrack Gantt Chart Improper Access Control Allows Edits by View‑Only Users

In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access

Authentication after Password Reset via Mailbox Integration in JetBrains YouTrack

In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset