In JetBrains YouTrack before 2026.2.16593 project settings disclosure via the MCP was possible
| Vendor | Product | Versions |
|---|---|---|
| jetbrains | youtrack | 0, 2026.2.16592 |
Updated affected versions to 2026.2.16592, changed severity to MEDIUM, marked as actively exploited, and added new tags related to authorization and remote exploitation.
Initial creation
