Description

In JetBrains YouTrack before 2026.2.19728 the attachment size limit could be bypassed via AI assistant thread conversion

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "3.1",
  "pubDate": "2026-11-06T11:17:14.117Z",
  "pubdate": "2026-11-06T11:17:14.117Z",
  "executiveSummary": "This vulnerability involves an improper validation mechanism within JetBrains YouTrack, specifically concerning the AI assistant thread conversion functionality. The flaw allows an authenticated attacker to circumvent configured attachment size limitations, potentially leading to unauthorized resource consumption or storage exhaustion.\nThe vulnerability affects versions of JetBrains YouTrack prior to 2026.2.19728. By leveraging the AI assistant thread conversion process, a malicious actor can bypass enforced file size constraints, which are typically designed to maintain system performance and prevent storage-related denial-of-service (DoS) conditions.\nSuccessful exploitation requires the attacker to have an active user account with the permissions necessary to interact with the AI assistant features. While the impact is primarily centered on resource management, this bypass can be abused to inflate server-side storage usage beyond defined organizational policies.\nRisk implications are moderate, primarily concerning administrative control over resource allocation and infrastructure integrity. Remediation necessitates an immediate upgrade to the patched version of YouTrack to enforce proper validation logic across all input vectors, including AI-driven interface components.",
  "technicalDetails": "The vulnerability resides within the logic handling the conversion of AI assistant threads into actionable YouTrack objects or attachments. The core issue is an inconsistent application of security controls between standard attachment upload mechanisms and the secondary processing flow utilized by the AI assistant component.\nIn standard YouTrack operations, file uploads are subject to strict server-side validation against administrative size limits. However, the AI assistant thread conversion module fails to re-validate the size of resultant payloads generated or transformed during the conversion process, treating these streams as trusted data.\nThe attack flow commences when an authenticated user initiates an AI assistant thread conversion. An attacker can craft a specific thread context that forces the AI module to process or include large binary data, or alternatively, trick the conversion engine into generating an attachment that exceeds the defined size ceiling. Because the conversion function lacks a synchronization check with the global attachment policy, the backend permits the creation of these oversized objects in the database or filesystem.\nThe vulnerable component is identified as the AI assistant thread conversion subsystem. This module does not correctly invoke the centralized validation interceptors that govern standard attachment handling. As a result, the system bypasses the byte-limit checks that would otherwise reject the file upload request.\nAuthentication is required to trigger the AI assistant features, meaning the threat vector is limited to authorized users. However, in environments where YouTrack instances are accessible to a broad range of verified users or integrated with external service accounts, this bypass can be systematically abused to fill server disk space or exert pressure on memory management during the processing of large, unauthorized attachments.\nPost-exploitation, the server may experience degradation in disk I/O performance or exhaustion of storage quotas. Furthermore, if the system triggers background processing or scanning for these attachments, the existence of oversized, non-compliant files may lead to secondary failures in maintenance tasks or backup procedures. The lack of validation ensures that the file is persisted into the system’s primary storage area, bypassing the expected administrative oversight."
}