CVE-2025-67740: Medium severity JetBrains TeamCity vulnerability
Published Dec 11, 2025
·Updated
In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata
Affected Software
2 affected components
JetBrains TeamCity<2025.11
JetBrains TeamCity<2025.11
Event History
Dec 11, 2025
CVE Published
via MITRE·03:19 PM
Data Sourced
via MITRE·03:19 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-67740?
CVE-2025-67740 is classified as a medium severity vulnerability.
2
How do I fix CVE-2025-67740?
To fix CVE-2025-67740, upgrade JetBrains TeamCity to version 2025.11 or later.
3
What does CVE-2025-67740 expose?
CVE-2025-67740 could expose metadata related to GitHub App tokens due to improper access control.
4
Which versions of JetBrains TeamCity are affected by CVE-2025-67740?
CVE-2025-67740 affects JetBrains TeamCity versions prior to 2025.11.
5
What impact does CVE-2025-67740 have on system security?
The impact of CVE-2025-67740 on system security includes potential unauthorized access to sensitive GitHub App token metadata.