CVE-2026-111094: High severity JetBrains TeamCity vulnerability
Published Oct 15, 2026
·Updated
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible
Affected Software
1 affected component
JetBrains TeamCity<2026.2, <2026.1.4, <2025.11.8
Event History
Oct 15, 2026
CVE Published
via MITRE·03:29 PM
Data Sourced
via MITRE·03:29 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which TeamCity versions are affected?
TeamCity versions before 2026.2, 2026.1.4, and 2025.11.8 are affected. Upgrade to the applicable fixed release for your version line.
2
Does exploitation require authentication or user interaction?
No. The provided vector indicates network-based exploitation with no privileges or user interaction required, although attack complexity is high.
3
What is the potential impact of successful exploitation?
Successful exploitation can result in remote code execution, with high impact to confidentiality, integrity, and availability.