Improper Permission Checks Exposing Build Configuration Parameters

In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters

In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download page

Insufficient Username Validation in TeamCity SAML Plugin

In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin

In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters

TeamCity Parameter Autocompletion Reveals Credentials

In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion

Credentials Exposed Through Thread Names in JetBrains TeamCity

In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names

JetBrains TeamCity SAML Plugin Open Redirect Vulnerability

In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible

Stored XSS Vulnerability on TeamCity SAML Login Page

In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible

Unauthenticated SSRF via Build Status in JetBrains TeamCity

In JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible

Reflected XSS in JetBrains TeamCity Keyword Filter

In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

Credentials Configuration Left on Disk After Disabling Versioned Settings

In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on disk

Open Redirect in TeamCity React Project Creation Flow

In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow

In JetBrains TeamCity before 2025.07 privilege escalation was possible due to incorrect directory permissions

In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows

In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect directory ownership

In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure

In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configuration

In JetBrains TeamCity before 2025.11 stored XSS was possible on agentpushInstall page

In JetBrains TeamCity before 2025.11 port enumeration was possible via the Perforce connection test