CVE-2026-59796 is a vulnerability in JetBrains TeamCity affecting versions prior to 2026.1.2. It arises from improper permission checks that allow unauthorized pipeline modification. The vulnerability is classified under CWE-862 (Improper Authorization). The CVSS 3.1 base score is 8.1, reflecting network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, and high impact on confidentiality and integrity but no impact on availability. No vendor advisory or patch information is currently available, and TeamCity is not a cloud service, so remediation depends on vendor patch releases.

An attacker with limited privileges could modify build pipelines without proper authorization, potentially leading to unauthorized changes in the build process. This compromises the confidentiality and integrity of the pipeline configurations. There is no reported impact on availability. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to TeamCity pipelines to trusted users only and monitor for unauthorized changes. Follow JetBrains' official communications for updates on patches or workarounds.