CVE-2026-59793 is a vulnerability in JetBrains TeamCity affecting versions prior to 2026.1.2. It involves arbitrary file access through the Perforce version control system integration, classified under CWE-73 (External Control of File Name or Path). The vulnerability allows an attacker with low privileges to read or modify files, impacting confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.8, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation depends on user action.

An attacker with low privileges can exploit this vulnerability to gain arbitrary file access via the Perforce VCS integration in affected TeamCity versions. This can lead to full compromise of confidentiality, integrity, and availability of the system or data managed by TeamCity. The high CVSS score reflects the severity of potential impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor JetBrains advisories closely and plan to upgrade to version 2026.1.2 or later once a patch is released. Until then, consider restricting access to the Perforce VCS integration or limiting privileges of users who can interact with it to reduce exposure.