CVE-2025-68162: Low severity JetBrains TeamCity vulnerability
In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configuration
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68162?
CVE-2025-68162 has not been assigned a specific CVSS score yet, but it is considered a significant security risk due to potential unauthorized code execution.
How do I fix CVE-2025-68162?
To fix CVE-2025-68162, upgrade to JetBrains TeamCity version 2025.11 or later where this vulnerability has been addressed.
What types of attacks are possible due to CVE-2025-68162?
CVE-2025-68162 could potentially allow attackers to load malicious extensions through project configurations, compromising the integrity of the TeamCity environment.
Is CVE-2025-68162 a remote or local vulnerability?
CVE-2025-68162 is considered a local vulnerability since it requires access to the TeamCity project configuration.
Who is affected by CVE-2025-68162?
Users of JetBrains TeamCity versions prior to 2025.11 are affected by CVE-2025-68162 and should take steps to secure their installations.