JetBrains TeamCity Sensitive Data Exposure Vulnerability via Default Agent Parameters

A vulnerability in JetBrains TeamCity prior to version 2025.11.2 allows for the exposure of sensitive data through default agent parameters. This issue could lead to unauthorized access to confidential information, potentially including credentials or other private data.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive data, including credentials, which could be misused to gain additional privileges or access within the application or system.

Remediation

Users can update to JetBrains TeamCity version 2025.11.2 or later to address this vulnerability.