This vulnerability in JetBrains TeamCity allows sensitive data to be exposed via default agent parameters in versions prior to 2025.11.2. It is classified under CWE-526, which concerns exposure of sensitive information. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity, requiring low privileges and no user interaction, resulting in limited confidentiality impact. No official remediation or patch information is available from the vendor advisory, and the product is not a cloud service, so remediation depends on JetBrains providing an update.

The impact is limited to confidentiality loss of sensitive data through default agent parameters. There is no reported impact on integrity or availability. No known exploits have been observed in the wild, reducing immediate risk. However, sensitive information exposure could potentially aid attackers in further reconnaissance or targeted attacks if leveraged.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently documented, users should monitor JetBrains advisories for updates. Until a patch is available, consider restricting access to TeamCity agents and sensitive configuration data to trusted personnel only.