—–BEGIN PGP SIGNED MESSAGE—–

Hash: SHA256

Remote Code Execution Vulnerability in JetBrains TeamCity

Indian – Computer Emergency Response Team (https://www.cert-in.org.in)

Severity Rating: CRITICAL

Software Affected

JetBrains TeamCity On-Premises versions prior to 2026.1.3 and 2025.11.7

Overview

A vulnerability has been reported in JetBrains TeamCity, which could allow an unauthenticated attacker to execute remote code on the targeted system.

Target Audience:

All end-user organizations and individuals using JetBrains TeamCity On-Premises.

Risk Assessment:

Risk of unauthorized remote code execution and system compromise.

Impact Assessment:

Unauthorized access to sensitive data, data manipulation, and complete system compromise.

Description

JetBrains TeamCity is a continuous integration and continuous delivery (CI/CD) server that provides tools for automating software development, testing, and deployment processes. It enables organizations to build, test, and deploy software applications through automated workflows.

A vulnerability has been reported in JetBrains TeamCity On-Premises due to a flaw in the agent polling protocol.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to execute remote code on the targeted system.

Solution

Apply appropriate updates as mentioned by the vendor:

https://www.jetbrains.com/privacy-security/issues-fixed/

Vendor Information

JetBrains

https://www.jetbrains.com/privacy-security/issues-fixed/

References

JetBrains

https://www.jetbrains.com/privacy-security/issues-fixed/

CVE Name

CVE-2026-63077

– —

Thanks and Regards,

CERT-In

Incident Response Help Desk

e-mail: incident@cert-in.org.in

Phone: +91-11-22902657

Toll Free Number: 1800-11-4949

Toll Free Fax : 1800-11-6969

Web: http://www.cert-in.org.in

PGP Fingerprint: A768 083E 4475 5725 B81A A379 2156 C0C0 B620 D0B4

PGP Key information:

https://www.cert-in.org.in/s2cMainServlet?pageid=CONTACTUS

Postal address:

Indian Computer Emergency Response Team (CERT-In)

Ministry of Electronics and Information Technology

Government of India

Electronics Niketan

6, C.G.O. Complex

New Delhi-110 003

—–BEGIN PGP SIGNATURE—–

iQIzBAEBCAAdFiEE6r4Iam/Ey0c/KakL3jCgcSdcys8FAmp7JxIACgkQ3jCgcSdc

ys+j4xAAg+wvRuvWN8KQXaiRJQeymUSSNu1LHYeEgPecYNwoM8k4xDK60+XM/lDf

qYXWdTtHIPVJG14cfuaAzhmz14QfEVU+4awWXJLy8mVyYxbds10G3qzFZp07crmq

ydz8HZVyxHt18Kbmhx+3idYGFo4rQwaITPL5jdeZvWxelCryViyYZn+QSJXVEcpO

Ixj15vu9NZLKJQu25F4YbWA4GzBKfJS7NYWik7IDLBRqNSJJTEIJuSX/vEqp/PfJ

do3kGa1e67OIXLVXpGlOvm0yHvl/7nUOKIrYHSV4SgfdCeZr3w830IXyFBNM1+ef

dhxVBfYxxYuPxdTuGsHY25Fo0+ktZEyk9yhPvfNOr/LR90Gtga5Rxf00FnkJKXkG

uxpK7staw+rYzDDTcJUkzAPeWW5E6Fxj6sGhZE0Apg3H1VNTszm1wgq/CYkK7g4C

Qmwib9PWi83XTMyinwhsHbpZK9jRQufuudYNGCS7dbVqQuwUid2v7D6A68sQBoSY

3/agxywPY2AOV7yQq36J1jjxhvkWCPHoedm42SnCwgiNxKaA6gIblTsKpXbHw7DL

+FTX+7oVVCB81jz/Uc4YyDP7gzIF+EFbsmEZ12g4A7FOMLSWm3SZZGnEQ/Neh7m0

1Ste1YHw1cmGWlyE9sCUuIDDoP1hZX+bXa434Ub6/ZE6l872Nxs=

=aM14

—–END PGP SIGNATURE—–