JetBrains TeamCity: Schwachstelle ermöglicht Codeausführung
WID-SEC-2026-2534 · first 28.07.2026 · updated 11.08.2026 · CVSS 9,8
What it is about
TeamCity ist ein Continuous Integration und Deployment Tool für Entwickler und DevOps Ingenieure. Ein entfernter, anonymer Angreifer kann eine Schwachstelle in JetBrains TeamCity ausnutzen, um beliebigen Programmcode auszuführen.
Under what conditions?
Over the network and without logging in. This is the most dangerous combination: attackers can scan reachable devices automatically.
What can happen in the worst case
An attacker could use the vulnerability to
- beliebigen Programmcode auszuführen
Am I affected?
Affected according to the BSI:
- JetBrains TeamCity <2026.1.3
- JetBrains TeamCity <2025.11.7
The installed version is usually shown under “Help → About” or in the device’s admin interface.
What helps?
Update to at least:
- JetBrains TeamCity 2026.1.3
- JetBrains TeamCity 2025.11.7
Is the vulnerability already being exploited?
- CVE-2026-63077: exploited in the wild according to CISA, in the catalogue since 05.08.2026, also for ransomware.
Information and sources
- Original BSI advisory (WID)
- JetBrains Security Advisory vom 2026-07-27 blog.jetbrains.com
- JetBrains Security Update vom 2026-07-27 blog.jetbrains.com
- GitHub Advisory Database vom 2026-07-27 github.com
- CISA Known Exploited Vulnerabilities Catalog vom 2026-08-05 www.cisa.gov
- Rapid7 Blog vom 2026-08-05 www.rapid7.com
CVE: CVE-2026-63077
Source: BSI warning and information service (CERT-Bund); CISA. The assessment of the conditions is my reading of the BSI text; the external pages are in their original language.