In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible

High CVSS 8.1

CVECVE-2026-111094

First seen2026-10-16 06:15 UTC

Disclosed2026-10-15 16:17 UTC

Last updated2026-10-16 06:15 UTC

Channel statusauto

Summary

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).