CVE-2026-33392 JetBrains CVE debrief

Who should care

Defenders and administrators responsible for JetBrains YouTrack installations, especially those with high-privileged users, should assess exposure and apply remediation as necessary.

Why it matters

CVE-2026-33392 is a high-severity vulnerability in JetBrains YouTrack that allows high-privileged users to achieve RCE via sandbox bypass. Defenders should prioritize verifying exposure and applying remediation, especially in environments with high-privileged user access.

• Potential RCE via sandbox bypass requires verification and remediation
• High-privileged user access to YouTrack increases risk of exploitation
• Remediation priority is high due to CVSS score of 7.2

Technical summary

CVE-2026-33392 is a high-severity vulnerability in JetBrains YouTrack before version 2025.3.131383. The vulnerability allows high-privileged users to achieve remote code execution (RCE) via sandbox bypass. The CVSS score for this vulnerability is 7.2, indicating a high severity level.

Defensive priority

Defenders should prioritize verifying exposure and applying remediation for this vulnerability, especially in environments where high-privileged users have access to YouTrack.

Recommended defensive actions

• Verify YouTrack version and apply remediation if necessary
• Restrict access to high-privileged users
• Monitor for suspicious activity

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its high severity score of 7.2 and the potential for RCE via sandbox bypass.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.