In JetBrains YouTrack before 2026.2.19728 the attachment size limit could be bypassed via AI assistant thread conversion
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://www.jetbrains.com/privacy-security/issues-fixed/ |
|
History
Fri, 06 Nov 2026 12:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Jetbrains
Jetbrains youtrack |
|
| Vendors & Products |
Jetbrains
Jetbrains youtrack |
Fri, 06 Nov 2026 12:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Attachment Size Limit Bypass via AI Assistant Thread Conversion in JetBrains YouTrack |
Fri, 06 Nov 2026 10:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In JetBrains YouTrack before 2026.2.19728 the attachment size limit could be bypassed via AI assistant thread conversion | |
| Weaknesses | CWE-770 | |
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: JetBrains
Published:
Updated: 2026-11-06T10:28:11.834Z
Reserved: 2026-11-05T18:38:32.900Z
Link: CVE-2026-123336
No data.
Status : Received
Published: 2026-11-06T11:17:14.117
Modified: 2026-11-06T11:17:14.117
Link: CVE-2026-123336
No data.
OpenCVE Enrichment
Updated: 2026-11-06T12:15:02Z
Weaknesses