In JetBrains YouTrack prior to 2023.3.22268 authorization check for inline comments inside thread replies was missed
jetbrains youtrack