---
id: "CVE-2026-123331"
page: "https://infrastack.ai/live/CVE-2026-123331"
kind: "vulnerability"
aliases: ["CVE-2026-123331"]
title: "JetBrains YouTrack: article editors could change visibility of restricted child articles"
severity: "medium"
cvss: 5.4
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["jetbrains", "other", "self-hosted", "youtrack"]
not_affected_if: ["fixed-version"]
published_at: "2026-11-06T11:17:13+00:00"
first_seen_at: "2026-11-06T11:41:28+00:00"
updated_at: "2026-11-06T11:42:27+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-123331", "first_seen_at": "2026-11-06T11:41:28+00:00"}]
exploit_sources: []
---

# JetBrains YouTrack: article editors could change visibility of restricted child articles

Link for people: https://infrastack.ai/live/CVE-2026-123331 (this .md is for agents)

In JetBrains YouTrack before 2026.2.19197, users with article edit rights could change the visibility of child articles they were not supposed to control. The sources do not say what the exposed content is or whether it can be read by people who should not see it.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed YouTrack version in the administration panel; affected if it is below `2026.2.19197`

## Fix

- JetBrains YouTrack: upgrade to `2026.2.19197` or later

## Timeline

- 2026-11-06T11:41:28+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-123331

## From the sources

In JetBrains YouTrack before 2026.2.19197 article editors could change visibility of restricted child articles

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_