CVE-2026-123335

JetBrains YouTrack versions before 2026.2.19562, 2026.1.14137, and 2025.3.169041 are affected by a missing authorization vulnerability (CWE-862). This flaw allows an attacker to attach tags to any issue via the tag issues collection. The vulnerability results in a LOW base severity (3.5) with an ...