JetBrains TeamCity Credentials Configuration Residual After Disabling Versioned Settings Vulnerability

A vulnerability exists in JetBrains TeamCity versions prior to 2025.11.3, where disabling versioned settings did not remove associated credentials configurations from the disk. This oversight could lead to unintended exposure or misuse of sensitive information.

Impact

The vulnerability could result in unauthorized access to stored credentials, potentially allowing for privilege escalation or unauthorized actions within TeamCity.

Remediation

Users can update to JetBrains TeamCity version 2025.11.3 or later to address this vulnerability.