CVE-2026-49377: Medium severity JetBrains TeamCity vulnerability
Published May 29, 2026
·Updated
In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters
Affected Software
2 affected components
JetBrains TeamCity<2025.11.2
JetBrains TeamCity<2025.11.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
JetBrains TeamCityto a version that resolves this vulnerability.Fixed in 2025.11.2
Event History
May 29, 2026
CVE Published
via MITRE·06:15 PM
Data Sourced
via MITRE·06:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-49377?
The severity of CVE-2026-49377 is medium, with a score of 4.3.
2
What does CVE-2026-49377 affect?
CVE-2026-49377 affects JetBrains TeamCity prior to version 2025.11.2.
3
What is the description of CVE-2026-49377?
CVE-2026-49377 involves the exposure of sensitive data via default agent parameters.
4
How do I fix CVE-2026-49377?
To fix CVE-2026-49377, update to JetBrains TeamCity version 2025.11.2 or later.
5
What are the risks associated with CVE-2026-49377?
CVE-2026-49377 poses a risk of sensitive data exposure, impacting confidentiality.