CVE-2026-49381 is a stored cross-site scripting (CWE-79) vulnerability affecting JetBrains TeamCity prior to version 2026.1. The issue occurs on the SAML login page, where malicious scripts can be stored and later executed in the context of a user's browser session. The CVSS 3.1 base score is 3.4 (AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N), indicating that exploitation requires network access, low attack complexity, high privileges, and user interaction, with a limited confidentiality impact and no integrity or availability impact. No patch or official remediation level has been published by JetBrains as of the provided data.

The vulnerability allows an attacker with high privileges to inject stored malicious scripts on the SAML login page, which could be executed when a user interacts with the page. The impact is limited to a partial confidentiality loss, with no direct effect on system integrity or availability. Given the requirement for high privileges and user interaction, the overall risk is low. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected SAML login page to trusted users only and monitor for suspicious activity. Avoid interacting with untrusted inputs on the login page. Follow updates from JetBrains for any forthcoming patches or official mitigations.