CVE-2026-103488

No fix known EPSS <1%CVSS 7.1

In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues