CVE Catalog

CVE-2026-57926

LowCVSS 2.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.18%

8th percentile — higher than 8% of all known CVEs

Summary

In JetBrains YouTrack before 2026.2.16593 the websandbox bridge was vulnerable to a prototype pollution attack.

Risk Assessment

An attacker could exploit this vulnerability to modify application behavior, potentially leading to privilege escalation or unauthorized operations in the user context.

Recommendation

It is recommended to immediately update JetBrains YouTrack to version 2026.2.16593 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

In JetBrains YouTrack before 2026.2.16593 the websandbox bridge was vulnerable to a prototype pollution attack

Vulnerability data from NVD (NIST) · CISA KEV · EPSS