CVE-2026-123325

EUVD-2026-118089
In JetBrains YouTrack before 2025.3.170763, 
2026.1.14150, 
2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandbox page
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.1 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown