JetBrains · TeamCity
Updated August 17, 2026
A deserialization of untrusted data vulnerability in JetBrains TeamCity allows unauthenticated remote code execution via the agent polling protocol. This vulnerability is critical because it can be exploited by an unauthenticated attacker, potentially giving them complete control over the system. The vulnerability's impact is increased due to its ease of exploitation and potential for significant disruptions.
If left unpatched, this vulnerability could lead to unauthorized access to sensitive information, potential data breaches, and significant financial losses. An attacker could exploit this vulnerability to execute arbitrary code, potentially disrupting business operations and causing significant harm.
Apply the latest security patch from JetBrains to mitigate this vulnerability. Ensure that all affected instances are updated as soon as possible to prevent potential attacks.