CVE-2026-111094

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@jetbrains.com

Published

2026-10-15

Last modified

2026-10-16

Weaknesses

CWE-502

Affected products

• Teamcity (Jetbrains)

References

• https://www.jetbrains.com/privacy-security/issues-fixed/