JetBrains TeamCity Improper Permission Checks Vulnerability in Build Configuration Parameters

Vulnerability

A vulnerability exists in JetBrains TeamCity versions prior to 2026.1, where improper permission checks allowed authenticated users to expose sensitive build configuration parameters. This issue could lead to unauthorized access to confidential information within the build settings.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive build configuration data, potentially leading to further security implications depending on the nature of the exposed information.

Remediation

Users can upgrade to TeamCity version 2026.1 or later to address this vulnerability.

Added: May 29, 2026, 7:29 PM
Updated: May 29, 2026, 7:29 PM

Vulnerability Rating

Custom Algorithm
spread
5.0
impact
2.5
exploitability
5.2
remediation
7.7
relevance
9.7
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.