Vulnerabilities

TI-2026-74812 CVE-2026-111096

Stored cross-site scripting in JetBrains TeamCity build log

LOW 31

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible

CVSS 3.1MEDIUM 6.7 Network Low privileges User interaction EPSS 0.00184 Published 2026-10-15 Fixed in 2026.2, 2026.1.4 +1 CWE-79

TI-2026-74811 CVE-2026-111095

Stored cross-site scripting in JetBrains TeamCity project overview

LOW 36

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00169 Published 2026-10-15 Fixed in 2026.2, 2026.1.4 +1 CWE-79

TI-2026-74810 CVE-2026-111094

Remote code execution in JetBrains TeamCity via whitelist bypass

MEDIUM 43

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00392 Published 2026-10-15 Fixed in 2026.2, 2026.1.4 +1 CWE-502

TI-2026-68683 CVE-2026-106219 · GHSA-j4qw-7f5f-rqvw

Missing Git submodule URL validation in JetBrains TeamCity

LOW 34

In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00732 Published 2026-10-06 Fixed in 2026.2.1 CWE-73

TI-2026-68682 CVE-2026-106218 · GHSA-p8v4-6cfg-7hh7

Sandbox escape in JetBrains TeamCity Kotlin DSL allows server RCE

MEDIUM 43

In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00319 Published 2026-10-06 Fixed in 2026.1.3 2025.11.7 CWE-184

TI-2026-64596 CVE-2026-100255 · GHSA-4858-hf6j-x5pg

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset

MEDIUM 43

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0035 Published 2026-09-30 Fixed in 2026.2, 2026.1.4 +1 CWE-1289

TI-2026-64595 CVE-2026-100254 · GHSA-6h2c-wm78-7wv3

OS command injection in JetBrains TeamCity

MEDIUM 40

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection in Pipeline Git connection settings

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00472 Published 2026-09-30 Fixed in 2026.2, 2026.1.4 +1 CWE-78

TI-2026-64594 CVE-2026-100253 · GHSA-6hq9-538r-6p54

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code…

MEDIUM 40

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00444 Published 2026-09-30 Fixed in 2026.2, 2026.1.4 +1 CWE-184

TI-2026-45031 CVE-2026-63077 · GHSA-94gx-v738-fx9w

Deserialization of untrusted data in JetBrains TeamCity

CRITICAL 100KEV

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.94887 Published 2026-07-27 Fixed in 2026.1.3, 2025.11.7 CWE-502

TI-2026-46946 CVE-2026-65906 · GHSA-8m5q-x899-528f

In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible

MEDIUM 44

In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00659 Published 2026-07-23 Fixed in 2026.1.2, 2025.11.6 CWE-94

TI-2026-42618 CVE-2026-59796 · GHSA-6wf4-qp9f-c3xh

In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks

LOW 37

In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0035 Published 2026-07-10 Fixed in 2026.1.2 CWE-862

TI-2026-42617 CVE-2026-59795 · GHSA-ch3x-q6cp-54rw

In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible

LOW 37

In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00417 Published 2026-07-10 Fixed in 2026.1.2 CWE-79

TI-2026-42616 CVE-2026-59794 · GHSA-5526-463r-44x5

In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data

LOW 34

In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00335 Published 2026-07-10 Fixed in 2026.1.2 CWE-79

TI-2026-42615 CVE-2026-59793 · GHSA-j8x6-f4hm-gpqh

In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration

MEDIUM 41

In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0049 Published 2026-07-10 Fixed in 2026.1.2 CWE-73

TI-2026-36554 CVE-2026-49381 · GHSA-mhr7-j6qx-58mw

In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible

LOW 21

In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00196 Published 2026-05-29 Fixed in 2026.1 CWE-79

TI-2026-36553 CVE-2026-49380 · GHSA-wcfj-vvvg-4x96

In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible

LOW 26

In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00157 Published 2026-05-29 Fixed in 2026.1 CWE-601

TI-2026-36552 CVE-2026-49379 · GHSA-pwcg-7wj6-m8gv

In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names

LOW 28

In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00257 Published 2026-05-29 Fixed in 2026.1 CWE-522

TI-2026-36551 CVE-2026-49378 · GHSA-pg2h-77h8-9m6v

In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion

LOW 19

In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00219 Published 2026-05-29 Fixed in 2026.1 CWE-862

TI-2026-36550 CVE-2026-49377 · GHSA-pm3g-f677-ppfg

In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters

LOW 21

In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00695 Published 2026-05-29 Fixed in 2025.11.2 CWE-526

TI-2026-36549 CVE-2026-49376 · GHSA-qhvc-3ggx-6rj7

In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin

LOW 34

In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00216 Published 2026-05-29 Fixed in 2026.1 CWE-863

TI-2026-36548 CVE-2026-49375 · GHSA-f325-w28m-vh67

In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download page

LOW 27

In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download page

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00205 Published 2026-05-29 Fixed in 2026.1, 2025.11.5 CWE-79

TI-2026-36547 CVE-2026-49374 · GHSA-pqrm-v5f6-j44f

In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters

LOW 33

In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00234 Published 2026-05-29 Fixed in 2026.1 CWE-862

TI-2026-36546 CVE-2026-49373 · GHSA-hqxf-vmvp-qr3c

In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings

HIGH 65

In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.32685 Published 2026-05-29 Fixed in 2026.1 CWE-88

TI-2026-36545 CVE-2026-49372 · GHSA-62q7-rxv8-hw8r

In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible

LOW 39

In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00298 Published 2026-05-29 Fixed in 2026.1, 2025.11.5 CWE-918

TI-2026-36544 CVE-2026-49371 · GHSA-jjhv-75hw-cg7g

In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible

LOW 35

In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00262 Published 2026-05-29 Fixed in 2026.1.1 CWE-79

Vulnerabilities

Filters