JetBrains warns of critical TeamCity remote code execution flaw
Source Bleeping Computer
Mentioned vulnerabilities
Rated Critical by Threat Radar from the Bleeping Computer text
Data as of 2 Aug 2026, 00:01 UTC
What to do
AI-suggested
JetBrains has released official security updates in TeamCity versions 2025.11.7 and 2026.1.3. Customers unable to upgrade can apply a security patch plugin available for TeamCity 2017.1 and later. Versions 2024.03 and newer automatically download and notify administrators of available security patches. Applying these updates or patches is the primary mitigation. Additionally, JetBrains recommends restricting internet-facing TeamCity servers by requiring VPN or other protective layers to reduce exposure. No action is required for TeamCity Cloud customers, as the vendor has already applied necessary protections.
Description
JetBrains is warning of a critical authentication bypass vulnerability affecting TeamCity On-Premises that could be exploited to achieve remote code execution. [...]