CVE-2025-64689: 
YouTrack vulnerability analysis and mitigation

A security vulnerability was identified in JetBrains YouTrack versions prior to 2025.3.104432, where a misconfiguration in the Junie component could potentially expose the global Junie token (NVD).

The vulnerability has been assigned CVE-2025-64689 and received varying CVSS v3.1 severity ratings. The National Vulnerability Database (NVD) assessed it with a Base Score of 7.5 (HIGH) with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, while JetBrains rated it as CRITICAL with a Base Score of 9.6 and vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N. The vulnerability is classified under CWE-522 (Insufficiently Protected Credentials) (NVD).

The exposure of the global Junie token could potentially lead to unauthorized access to sensitive information and system resources. The high CVSS scores indicate significant potential impact, particularly concerning confidentiality and integrity of the affected systems (NVD).

Users are advised to upgrade to JetBrains YouTrack version 2025.3.104432 or later to address this vulnerability. The fix has been confirmed in the vendor's security advisory (JetBrains Advisory).